9.3. Performing Integrity Checks
To initiate a manual check, enter the following command as
root
:
~]# aide --check
AIDE found differences between database and filesystem!!
Start timestamp: 2017-04-07 17:11:33
Summary:
Total number of files: 104892
Added files: 7
Removed files: 0
Changed files: 52
...
At a minimum, AIDE should be configured to run a weekly scan. At most, AIDE should be run daily. For example, to schedule a daily execution of AIDE at 4:05 am using
cron
(see the Automating System Tasks chapter in the System Administrator's Guide), add the following line to /etc/crontab
:
05 4 * * * root /usr/sbin/aide --check