hi,

i am trying to implement some kind of filesystem based intrusion  
detection like mentioned at http://www.bacula.org/rel-manual/ 
Using_Bacula_Improv_Comput.html

i set up a verify job and the fileset it references to goes like this

...snippel
         Include {
                 Options {
                         signature=SHA1
                         verify = p
snappel...

i get:
17-Jan 03:29 winch-dir: Verifying against JobId=354 Job=IDSarabisch. 
2007-01-17_02.44.23
17-Jan 03:29 winch-dir: Start Verify JobId=375 Level=Catalog  
Job=IDSarabisch.2007-01-17_03.29.48
17-Jan 03:29 winch-dir: Bacula 2.0.0 (04Jan07): 17-Jan-2007 03:29:55

(no differences found)

when i change my Fileset and put the verify before the signature

...snippel
        Include {
                 Options {
                         verify = p
                         signature=SHA1
  snappel...

i get:
17-Jan 03:31 winch-dir: Verifying against JobId=354 Job=IDSarabisch. 
2007-01-17_02.44.23
17-Jan 03:31 winch-dir: Start Verify JobId=376 Level=Catalog  
Job=IDSarabisch.2007-01-17_03.31.18
17-Jan 03:31 winch-dir: File: /root/test/
17-Jan 03:31 winch-dir:       st_mode  differ. Cat: 41c5 File: 41ed
17-Jan 03:31 winch-dir: IDSarabisch.2007-01-17_03.31.18 Error: Bacula  
2.0.0 (04Jan07): 17-Jan-2007 03:31:25

(difference found)

and the latter is the expected result.

i thought that the order of directives should not make a difference,  
or did i miss something ?
has anyone  an idea what is going on ?

best regards, markus

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to