Help with aide.conf file syntax

abefroman · 08-18-2009, 10:29 PM

I am trying to match images, the following works:
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*\.jpg$

The following does not work:
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/[a-zA-Z0-9]*\.jpg$
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*\.[jpg|JPG]$
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*\.[jpg|JPG]+$
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*\.[jpgJPG]$
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*\.[jJ][pP][gG]$

(I also tried replacing @@{TOPDIR} with /home/myusername

According to the aide manual: http://www.cs.tut.fi/~rammer/aide/manual.html
the [a-zA-Z0-9] syntax should be allowed:

From the manual:

Quote:

However since the negative selection rules are checked last and .* can match to an empty string /var/log/messages is not added to the database. The following is a more correct way of doing it.

/ R
=/var/log/messages$ R+a
!/var/log/messages\.[0-9]$

Does anyone know why its not matching my patterns?

TIA

unSpawn · 08-19-2009, 04:57 AM

I know "!@@{TOPDIR}/path/.*[endmarker|ENDMARKER]$"-style globs work. Post your config?

abefroman · 08-19-2009, 07:51 AM

Here's my config:

Code:

@@define TOPDIR /home/abefroman

@@ifndef TOPDIR
@@define TOPDIR ./
@@endif

@@ifdef DEBUG
@@define DEBUG ison
@@undef NOT_DEBUG
@@else
@@define NOT_DEBUG true
@@undef DEBUG
@@endif

@@ifhost korppi
@@define KORPPI yes
@@endif

@@ifnhost ftp
@@define BUMMER true
@@endif

# The location of the database to be read.
database=file:@@{TOPDIR}/aide.db.in

# The location of the database to be written.
database_out=file:@@{TOPDIR}/aide.db.out


verbose=20

report_url=stdout

MD=md5

#Selection regexp rule
@@{TOPDIR}/public_html MD
!@@{TOPDIR}/public_html/forums/vbseo_sitemap/data/hits/[0-9]*.log?
!@@{TOPDIR}/public_html/cache/cache_[a-f0-9]*
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/[a-zA-Z0-9]*\.[jpg|JPG]$

unSpawn · 08-19-2009, 10:39 AM

Works for me like this with Aide-0.13.1:

Code:

@@define TOPDIR /home/abefroman
database=file:/tmp/aide.db.in
database_out=file:/tmp/aide.db.out
verbose=20
report_url=stdout
MD=md5

#Selection regexp rule
@@{TOPDIR}/public_html MD
!@@{TOPDIR}/public_html/forums/vbseo_sitemap/data/hits/.*[0-9]*.log?
!@@{TOPDIR}/public_html/cache/cache_[a-f0-9]*
!@@{TOPDIR}/public_html/cache/thumbnail/article_small/.*[a-zA-Z0-9].*.[jpg|JPG]$

abefroman · 09-20-2009, 08:22 PM

Quote:

Originally Posted by unSpawn

.*[a-zA-Z0-9].*.[jpg|JPG]$

Why is the .* is needed before [a-zA-Z0-9]?
and a .* after
as opposed to just [a-zA-Z0-9]*.[jpg|JPG]$?

From what I understand [a-zA-Z0-9]*.[jpg|JPG]$ means
[a-zA-Z0-9] = any letter or number
* = 0 or more times
.[jpg|JPG] = .jpg or .JPG
$ = end string

TIA