From shawn at redhat.com Thu Aug 20 11:37:25 2015 Content-Type: multipart/mixed; boundary="===============8745305095284329866==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH 01/21] Update aide_build_database Date: Sun, 27 Jul 2014 23:30:32 -0400 Message-ID: <53D5C3D8.1030504@redhat.com> In-Reply-To: 1406518028-3921-2-git-send-email-shawn@redhat.com --===============8745305095284329866== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 7/27/14, 11:26 PM, Shawn Wells wrote: > From: Leland Steinke > > - Assign rule a severity > - Create OCIL text > - Update CCI mappings > > Signed-off-by: Leland Steinke > --- > RHEL/6/input/system/software/integrity.xml | 8 ++++++-- > 1 files changed, 6 insertions(+), 2 deletions(-) > > diff --git a/RHEL/6/input/system/software/integrity.xml b/RHEL/6/input/sy= stem/software/integrity.xml > index 943140d..73a0629 100644 > --- a/RHEL/6/input/system/software/integrity.xml > +++ b/RHEL/6/input/system/software/integrity.xml > @@ -64,7 +64,7 @@ of AIDE, because it changes binaries. > > > = > - > + > Build and Test AIDE Database > Run the following command to generate a new database: >
# /usr/sbin/aide --init
> @@ -77,12 +77,16 @@ To initiate a manual check, run the following command: >
# /usr/sbin/aide --check
> If this check produces any unexpected output, investigate. >
> + > +To find the location of the AIDE databse file, run the following command: > +
# ls -l DBDIR/databse_file_name
> +
> > For AIDE to be effective, an initial database of "known-good" informati= on about files > must be captured and it should be able to be verified against the insta= lled files. > > > - > + >
> = > ack --===============8745305095284329866==--