Build run-time aide configuration
update-aide.conf
update-aide.conf rebuilds the runtime AIDE configuration. /etc/aide/aide.conf and the contents of the /etc/aide/aide.conf.d directory. If one of these files is executeable, update-aide.conf executes the file and uses its stdout for the AIDE configuration. For files that are not executeable, their contents is copied into AIDE configuration verbatim. The input paths can be controlled from the command line or using configuration options in /etc/default/aide. update-aide.conf is primarily used by aideinit (8), the aide wrapper and and the /etc/cron.daily/aide script.
Debian Packages might drop configuration snippets in /etc/aide/aide.conf.d , which will be picked up automatically by aide if the default paths are used. If you would prefer to control your rules yourself, you might want to point update-aide.conf to a different conf.d directory by configuring /etc/default/aide appropriately. You can then use symlinks to select Debian rules. Or you can edit the files dropped into /etc/aide/aide.conf.d yourself, they are dpkg-conffiles.
All command line settings can also be overridden by setting the appropriate environment variable from /etc/default/aide. Additionally, values set in the environment prior to the call to update-aide.conf are also honored. The location of the defaults file can also be overridden from the environment.
-v, --verbose
Enable verbose mode, tell about ignored files
-h, --help
Show this message
--keepcomments
Do not remove comment lines
--removecomments
Remove comment lines (default)
-o, --output
write output to file instead of /var/lib/aide/aide.conf.autogenerated
-d, --confdir
read input from given directory instead of /etc/aide. Can be overridden using UPAC_CONFDIR.
-D, --confd
read config file snippets from given directory instead of /etc/aide/aide.conf.d. Can be overridden using UPAC_CONFD.
-S, --settingsd
read settings files from given directory instead of /etc/aide/aide.settings.d. Can be overridden using UPAC_SETTINGSD.
-a, --autoconfigfile
write output to the given file instead of /var/lib/aide/aide.conf.autogenerated. Can be overridden using UPAC_AUTOCONFIGFILE.
-m, --mainconfigfile
read main part of aide configuration from given file instead of /etc/aide/aide.conf. Can be overridden using UPAC_MAINCONFIGFILE
/etc/aide/aide.conf
main AIDE configuration file
/etc/aide/aide.conf.d
configuration file fragments to be added to the master configuration file
/etc/aide/aide.settings.d
settings files parsed by some configuration files in UPAC_CONFD.
/etc/default/aide
Debian aide defaults file used for permanently overriding some option defaults. This can be overridden from the environment using the UPAC_DEFAULTFILE variable.
This manual page was written by Mike Markley <[email protected]> and Marc Haber <[email protected]>, for the Debian GNU/Linux system (but may be used by others).