Thanks Eric! I am going to try it out this evening. I´ll let you know how it
goes in a few ours.

Regards,

Ben


2007/1/9, Eric Webster <[EMAIL PROTECTED]>:

 The rule in that conf only matches numbers and a dot, your the directory
for your kernel would have a hyphen in it.

/lib/modules/[0-9\.\-]*/modules\.dep$

Should do the trick. I'm not sure if the hyphen needs escaped or not, try
it and remove the slash if not.


Eric Webster
Enterprise Services
2CheckOut.com


 ------------------------------
*From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf
Of *Sonixxfx
*Sent:* Tuesday, January 09, 2007 3:21 AM
*To:* Aide user mailinglist
*Subject:* [Aide] Howto match kernel names with regular expressions?


 Hi,

I would like to monitor the kernel directories located under /lib/modules.
I am trying to create a rule with regular expressions so that it matches all
kind of kernel names. At the moment I am using kernel-2.4.27-2-386 on
Debian. Unfortunatly the rule from /etc/aide.conf.d/31_aide_modules does not
match this kernel. I have also tried to create a rule myself but without
success.

So can someone show me what I can use to match these directories? I also
want to monitor 2.6 kernels.

Thanks for the help.


_______________________________________________
Aide mailing list
[email protected]
https://mailman.cs.tut.fi/mailman/listinfo/aide



_______________________________________________
Aide mailing list
[email protected]
https://mailman.cs.tut.fi/mailman/listinfo/aide

Reply via email to