Am 15.09.2011 um 21:56 schrieb Hannes von Haugwitz:

On Thu, Sep 15, 2011 at 07:07:02PM +0200, Axel Rau wrote:
the FreeBSD ports collection contains aide 0.13.1 and I used it for many years.
Using the 0.13.1 patches of configure.in, I could build a binary, but after creating a new db, the 1st run produced one line per file like this:
---
Entry /usr/bin/perror in databases has different attributes: 1bbd 800001bbd
---

This line indicates that the attributes for /usr/bin/perror in the old
database (created with 0.13.1?)
No, this was fresh created from 0.15.1.
differ from the ones in the new database
(created with 0.15.1).

You can use the aide-attributes.sh script from contrib/ to display the
differences:

$ aide-attributes.sh 1bbd 800001bbd
+ftype
I see.
...
The message shouldn't occur any longer after you copied the new 0.15.1
database over the old 0.13.1 one.
Unfortunately it's not so easy.
There seems to be a difference in the ftype of all files between a fresh created database and the check done immediately after:
___
bh3# aide -i

AIDE, version 0.15.1

### AIDE database at /var/db/aide/databases/aide.db.new initialized.

bh3# ls -l /var/db/aide/databases/aide.db.new 
-rw-------  1 root  wheel  4087519 Sep 16 07:20 /var/db/aide/databases/aide.db.new
bh3# cd /var/db/aide/databases/
bh3# mv aide.db.new aide.db
bh3# head aide.db 
@@begin_db
# This file was generated by Aide, version 0.15.1
# Time of generation was 2011-09-16 07:20:13
@@db_spec name lname attr perm inode uid gid lcount size mtime ctime md5 
/dev 0 2589 40555 2 0 0 6 0 0 0 0
/etc 0 3005 40755 94209 0 0 20 2048 MTMxNjE1MTc4OA== MTMxNjE1MTc4OA== 0
/bin 0 3005 40755 4 0 0 2 1024 MTI5Nzk5Mzg3Mg== MTMwOTg5MjUzOQ== 0
/root 0 3005 40755 6 0 0 4 512 MTMxNjE1MjA3Ng== MTMxNjE1MjA3Ng== 0
/sbin 0 3005 40755 70660 0 0 2 2560 MTI5Nzk5MzkyMA== MTMwOTg5MjUzOQ== 0
/.profile 0 7101 100644 8 0 0 2 265 MTI5Nzk5MzkyOQ== MTMwOTg5MjUzNw== KNd8hy5ADZbk04mfsS9pRg==
bh3# aide
Entry /dev in databases has different attributes: a1d 800000a1d
Entry /etc in databases has different attributes: bbd 800000bbd
Entry /bin in databases has different attributes: bbd 800000bbd
Entry /root in databases has different attributes: bbd 800000bbd
...
---

So blkcnt_t is not defined on FreeBSD?
It is and so I removed the patch.


Thanks for answering, Axel
PS: I'll send you the build log in private mail.
---
PGP-Key:29E99DD6  ☀ +49 151 2300 9283  ☀ computing @ chaos claudius

_______________________________________________
Aide mailing list
[email protected]
https://mailman.cs.tut.fi/mailman/listinfo/aide

Reply via email to