Using AIDE to monitor the integrity of files in Linux systems

In Linux system using AIDE to monitor file integrity is how, I believe many inexperienced people are helpless, for this reason this article summarizes the causes of the problem and solutions, through this article I hope you can solve this problem.

AIDE's main purpose is to check the integrity of files, review which files have been modified in the system, AIDE is a free but powerful tool.

Test environment CentOS 7.7

install yum -y install aideCOPY view software installation info rpm -ql aideCOPY

View configuration and description

If there is a monitoring directory that needs to be customized, follow the directory path + space + rule alias. The following is the instructions for use: initialize the aid before the system goes online, and generate the initial database sample for later reference.

[root@one aide]# aide -iCOPY

Save the generated database files to a safe place. Take it out when you need to compare. If you have used it for a while, you need to check if there are intruders who have moved your system. At this time, copy a copy of the aid database file you backed up at that time to the/var/lib/aid directory and rename it aid.db.gz. Execute aid-C.

If you agree that the changes are OK, you can update aid's database with aid-u. Keep the database in a safe place.

Linux versions are: Deepin, UbuntuKylin, Manjaro, LinuxMint, Ubuntu and other versions. Deepin is one of the best Linux distributions in China; Ubuntu Kylin is a derivative distribution based on Ubuntu;Manjaro is a Linux distribution based on Arch;LinuxMint's default Cinnamon desktop is similar to Windows XP and easy to use;Ubuntu is a Linux operating system based on desktop applications.

After reading this, do you know how to use AIDE to monitor file integrity on Linux? If you still want to learn more skills or want to know more related content, welcome to pay attention to the industry information channel, thank you for reading!