NOISE setting in /etc/default/aide needs better documentation
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
aide (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: aide
this is only a bug in the documentation and is low priority; option works as designed.
the documentation in /etc/default/aide claims:
# This parameter gives a grep regular expression. If given, all output lines
# that _don't_ match the regexp are listed first in the script's output. This
# allows to easily remove noise from the AIDE report.
while it is technically true, my interpretation is that any regexp, such as /.svn/ should match any line containing that expression. unfortunately it is the case that the expression must match the absolute path starting from /, so what i really wanted was .*/.svn/ to catch what came before. as well, this will only match file names that are changed/
# This parameter gives a regular expression for filenames to ignore during
# the first part of the report. The expression must match the entire
# filename, and not just any arbitrary substring within the filename.
# If given, all output lines that _don't_ match the regexp are listed first
# in the script's output. This allows noise to be easily removed from the
# AIDE report.
# Example: /home/developer
# /\.svn/ will not (except that metadata stored in the root directory)
checked against aide 0.13.1-8ubuntu1 in ubuntu 8.04