Gitea
2d8d978d82
Package changes: +aide-common 0.17.3-4+deb11u1 all +altermime 0.3.10-12 amd64 +bsd-mailx 8.1.2-0.20180807cvs-2 amd64 +dovecot-core 1:2.3.13+dfsg1-2 amd64 +libdbd-mysql-perl 4.050-3+b1 amd64 +logwatch 7.5.5-1 all +postfix 3.5.6-1+b1 amd64 +postfix-mysql 3.5.6-1+b1 amd64 +postfix-pcre 3.5.6-1+b1 amd64 +postfix-sqlite 3.5.6-1+b1 amd64
110 lines
4.5 KiB
Plaintext
110 lines
4.5 KiB
Plaintext
# These settings are mainly for the wrapper scripts around aide,
|
|
# such as aideinit and /etc/cron.daily/aide
|
|
|
|
# Main configuration file
|
|
CONFIG="/etc/aide/aide.conf"
|
|
|
|
# Set this to no to disable daily aide runs
|
|
#CRON_DAILY_RUN=yes
|
|
|
|
# This is used as the host name in the AIDE reports that are sent out
|
|
# via e-mail. It defaults to the output of $(hostname --fqdn), but can
|
|
# be set to arbitrary values.
|
|
# FQDN=
|
|
|
|
# This is used as the subject for the e-mail reports.
|
|
# If your mail system only threads by subject, you might want to add
|
|
# some variable content here (for example $(date +%Y-%m-%d)).
|
|
MAILSUBJ="Daily AIDE report for $FQDN"
|
|
|
|
# This is the email address reports get mailed to
|
|
# default is root
|
|
# This variable is expanded before it is used, so you can use variables
|
|
# here. For example, MAILTO=$FQDN-aide@domain.example will send the
|
|
# report to host.name.example-aide@domain.example is the local FQDN is
|
|
# host.name.example.
|
|
MAILTO=root
|
|
|
|
# RFC 5322 (2.1.1) limits the maximum length of e-mail messages
|
|
# to 998. aide limits its mail messages to a slightly smaller value
|
|
# in default. If your mail system can handle messages with longer
|
|
# lines and you have very long paths on your system, set this to
|
|
# a very high value.
|
|
#MAILWIDTH=990
|
|
|
|
# Set this to yes to suppress mailings when no changes have been
|
|
# detected during the AIDE run and no error output was given.
|
|
#QUIETREPORTS=no
|
|
|
|
# Set this to yes to suppress mailings under all circumstances
|
|
# This option implies QUIETREPORTS=yes
|
|
#SILENTREPORTS=no
|
|
|
|
# Set this to no if you have figlet installed but do not want figlet
|
|
# output in your daily cron job mail
|
|
#FIGLET=yes
|
|
|
|
# This parameter defines which AIDE command to run from the cron script.
|
|
# Sensible values are "update" and "check".
|
|
# Default is "check", ensuring backwards compatibility.
|
|
# Since "update" does not take any longer, it is recommended to use "update",
|
|
# so that a new database is created every day. The new database needs to be
|
|
# manually copied over the current one, though.
|
|
COMMAND=update
|
|
|
|
# This parameter defines what to do with a new database created by
|
|
# COMMAND=update. It is ignored if COMMAND!=update.
|
|
# no: Do not copy new database to old database. This is the default.
|
|
# yes: Copy new database to old database. This means that changes to the
|
|
# file system are only reported once. Possibly dangerous.
|
|
# ifnochange: Copy new database to old database if no changes have
|
|
# been reported. This is needed for ANF/ARF to work reliably.
|
|
COPYNEWDB=no
|
|
|
|
# Set this to yes to truncate the detailed changes part in the mail. The full
|
|
# output will still be listed in the log file.
|
|
TRUNCATEDETAILS=no
|
|
|
|
# Set this to yes to suppress file changes by package and security
|
|
# updates from appearing in the e-mail report. Filtered file changes will
|
|
# still be listed in the log file. This option parses the /var/log/dpkg.log
|
|
# file and implies TRUNCATEDETAILS=yes
|
|
FILTERUPDATES=no
|
|
|
|
# Set this to yes to suppress file changes by package installations
|
|
# from appearing in the e-mail report. Filtered file changes will still
|
|
# be listed in the log file. This option parses the /var/log/dpkg.log file and
|
|
# implies TRUNCATEDETAILS=yes.
|
|
FILTERINSTALLATIONS=no
|
|
|
|
# This parameter defines how many lines to return per e-mail. Output longer
|
|
# than this value will be truncated in the e-mail sent out.
|
|
# Set value to "0" to disable this option.
|
|
LINES=1000
|
|
|
|
# This parameter gives a grep regular expression. If given, all output lines
|
|
# that _don't_ match the regexp are listed first in the script's output. This
|
|
# allows to easily remove noise from the AIDE report.
|
|
NOISE=""
|
|
|
|
# This parameter defines which options are given to aide in the daily
|
|
# cron job. The default is "-V4".
|
|
AIDEARGS=""
|
|
|
|
# Set this to a command that will be executed before the cron job
|
|
# exits. This can be used to postprocess the generated report.
|
|
# If the command is not in /sbin:/usr/sbin:/bin:/usr/bin (see PATH
|
|
# setting in the daily cron job), you need to give a fully qualified
|
|
# path. The script is executed before the aide lock is released.
|
|
# The hook is called with a single parameter meaning:
|
|
# signal: The cron job was terminated by a signal
|
|
# fatal: There was a fatal error
|
|
# nolock: The lock could not be obtained
|
|
# cantmovetmp: It was not possible to move away the temporary directory
|
|
# cantcreatetmp: It was not possible to create the temporary directory
|
|
# success: aide finished successfully and gave meaningful results
|
|
# unknown: onexit was called with an illegal reason (should not happen)
|
|
# If the cron job aborted before the cron job was fully set up,
|
|
# "early-" is prepended to the reason.
|
|
CRONEXITHOOK=""
|