aide - Debian

This is a discussion on aide - Debian ; Hello, I am running Etch. And I have a problem with "aide" When I try aide -u or aide -c I always get: triac:/etc# aide -i Couldn't open file /tmp/empty/aide.db.new for writing triac:/etc# aide -u Couldn't open file /tmp/empty/aide.db.new for ...

+ Reply to Thread
Results 1 to 4 of 4

Thread: aide

  1. aide

    Hello,

    I am running Etch.
    And I have a problem with "aide"


    When I try aide -u or aide -c I always get:

    triac:/etc# aide -i
    Couldn't open file /tmp/empty/aide.db.new for writing
    triac:/etc# aide -u
    Couldn't open file /tmp/empty/aide.db.new for writing

    I removed aide with aptitude and reinstalled it - still the same error
    I tried dpkg-reconfigure aide

    root 24403 1 0 17:59 ? 00:00:00 /bin/sh /usr/sbin/aideinit -b -f
    root 24404 24403 0 17:59 ? 00:00:00 /bin/sh /usr/bin/aide.wrapper --init
    root 24582 24404 93 17:59 ? 00:00:04 /usr/bin/aide
    --config /var/lib/aide/aide.conf.autogenerated --init

    And the result is:

    triac:/var/lib/aide# ls -al
    total 55260
    drwxr-xr-x 2 root root 4096 2007-04-09 18:09 .
    drwxr-xr-x 31 root root 4096 2007-04-09 17:24 ..
    -rw-r--r-- 1 root root 33837 2007-04-09 17:59 aide.conf.autogenerated
    -rw------- 1 root root 28234087 2007-04-09 18:09 aide.db
    -rw------- 1 root root 28234087 2007-04-09 18:09 aide.db.new
    triac:/var/lib/aide#


    But I still get the same error after aide -i and aide -u

    What am I doing wrong ???

    Thanks.

    carex.

  2. Re: aide

    On Apr 9, 6:17 pm, carex wrote:
    > Hello,
    >
    > I am running Etch.
    > And I have a problem with "aide"
    >
    > When I try aide -u or aide -c I always get:
    >
    > triac:/etc# aide -i
    > Couldn't open file /tmp/empty/aide.db.new for writing
    > triac:/etc# aide -u
    > Couldn't open file /tmp/empty/aide.db.new for writing
    >
    > I removed aide with aptitude and reinstalled it - still the same error
    > I tried dpkg-reconfigure aide
    >
    > root 24403 1 0 17:59 ? 00:00:00 /bin/sh /usr/sbin/aideinit -b -f
    > root 24404 24403 0 17:59 ? 00:00:00 /bin/sh /usr/bin/aide.wrapper --init
    > root 24582 24404 93 17:59 ? 00:00:04 /usr/bin/aide
    > --config /var/lib/aide/aide.conf.autogenerated --init
    >
    > And the result is:
    >
    > triac:/var/lib/aide# ls -al
    > total 55260
    > drwxr-xr-x 2 root root 4096 2007-04-09 18:09 .
    > drwxr-xr-x 31 root root 4096 2007-04-09 17:24 ..
    > -rw-r--r-- 1 root root 33837 2007-04-09 17:59 aide.conf.autogenerated
    > -rw------- 1 root root 28234087 2007-04-09 18:09 aide.db
    > -rw------- 1 root root 28234087 2007-04-09 18:09 aide.db.new
    > triac:/var/lib/aide#
    >
    > But I still get the same error after aide -i and aide -u
    >
    > What am I doing wrong ???
    >
    > Thanks.
    >
    > carex.


    I don't use it myself, so...
    Have you read /usr/share/doc/aide/README.Debian (or what it's called).
    It usally have good information. And you even might try search on
    http://wiki.debian.org/

    Good luck


  3. Re: aide

    Hi,

    > When I try aide -u or aide -c I always get:
    >
    > triac:/etc# aide -i
    > Couldn't open file /tmp/empty/aide.db.new for writing



    Dimly remember that I had the same problem. The path was somewhere
    hardcoded. Just
    mkdir /tmp/empty/
    and everything should be fine.

    Andreas

    --

    Andreas Wilm | 0x7C68FBCC


  4. Re: aide

    On Wed, 11 Apr 2007 15:11:22 +0100, Andreas Wilm wrote:

    > Hi,
    >
    >> When I try aide -u or aide -c I always get:
    >>
    >> triac:/etc# aide -i
    >> Couldn't open file /tmp/empty/aide.db.new for writing

    >
    >
    > Dimly remember that I had the same problem. The path was somewhere
    > hardcoded. Just
    > mkdir /tmp/empty/
    > and everything should be fine.
    >
    > Andreas
    >


    Odd.

    I thought the path was coded in /etc/aide/aide.conf like this:

    # AIDE conf

    database=file:/var/lib/aide/aide.db
    database_out=file:/var/lib/aide/aide.db.new

    But, because I am a bit lost here, I did try what you proposed
    mkdir /tmp/empty

    But, again and again, it fails when I start aide:
    triac:/var/lib/aide# aide -u
    Couldn't open file /tmp/empty/aide.db for reading
    triac:/var/lib/aide#

    But now when I start aide -i I get:

    triac:/# aide -i

    AIDE, version 0.13.1

    ### AIDE database at /tmp/empty/aide.db.new initialized.

    triac:/#
    triac:/tmp/empty# ls -al
    total 12
    drwxr-xr-x 2 root root 4096 2007-04-11 21:43 .
    drwxrwxrwt 10 root root 4096 2007-04-11 21:39 ..
    -rw------- 1 root root 131 2007-04-11 21:42 aide.db.new
    triac:/tmp/empty#

    This is just a file of 131 bytes.


    OK. Forget everything I said from the beginning of this thread !!
    The solution: (from README.Debian.gz)

    The Debian scripts invoke aide via the wrapper /usr/bin/aide.wrapper
    which gives Debian-specific parameters to the aide binary. If you
    intend to use AIDE for your own use, please note that aide is compiled
    to use /dev/null as the default configuration file, so you _always_
    need to give the path to a configuration file. This is to prevent a
    local invocation of aide from messing with the Debian database.

    So, here what I should have done:
    triac:/var/lib/aide# aide -u -c aide.conf.autogenerated

    Sorry.
    I will do better the next time. (and really read the README.Debian !!!)

    carex.

+ Reply to Thread