59
59
.IP "warn_dead_symlinks"
60
60
Whether to warn about dead symlinks or not. Valid values are
61
61
yes,true,no and false. The default is not to warn about dead symlinks.
63
Whether to group the files in the report by added, removed and changed
64
files or not. Valid values are yes, true, no and false.
65
The default is to group the files in the report.
62
66
.IP "summarize_changes"
63
67
Whether to summarize changes in the added, removed and changed files
64
68
sections of the report or not. Valid values are yes,true,no and false.
65
69
The default is not to summarize the changes.
67
The general format is like the string YlZbpugamcinCAXS, where Y is
71
The general format is like the string YlZbpugamcinCAXSE, where Y is
68
72
replaced by the file-type (\fBf\fP for a regular file, \fBd\fP for a
69
73
directory, \fBL\fP for a symbolic link, \fBD\fP for a character device,
70
74
\fBB\fP for a block device, \fBF\fP for a FIFO, \fBs\fP for a unix
71
socket, \fB|\fP for a Solaris door and \fB?\fP otherwise).
75
socket, \fB|\fP for a Solaris door, \fB!\fP if file type has changed and \fB?\fP otherwise).
73
77
The Z is replaced as follows: A \fB=\fP means that the size has not changed,
74
78
a \fB<\fP reports a shrinked size and a \fB>\fP reports a grown size.
105
109
A \fBn\fP means that the link count has changed.
107
111
A \fBC\fP means that one or more checksums have changed.
115
The following letters are only available when explicitly enabled using configure:
109
120
A \fBA\fP means that the access control list has changed.
111
122
A \fBX\fP means that the extended attributes have changed.
113
124
A \fBS\fP means that the SELinux attributes have changed.
126
A \fBE\fP means that the file attributes on a second extended file system have changed.
115
128
.IP "report_attributes"
116
129
Special group definition that lists parameters which are always printed
136
149
Note that this is different from the way Tripwire(tm) does it.
138
151
There is also a special group named "ignore_list". The predefined
139
-groups listed in it are NOT displayed in the final report.
152
\-groups listed in it are NOT displayed in the final report.
141
154
.SH "SELECTION LINES"
226
240
.IP "tiger: tiger checksum"
227
241
.IP "haval: haval checksum"
228
242
.IP "crc32: crc32 checksum"
229
.IP "R: p+i+l+n+u+g+s+m+c+md5"
243
.IP "R: p+ftype+i+l+n+u+g+s+m+c+md5"
244
.IP "L: p+ftype+i+l+n+u+g"
231
245
.IP "E: Empty group"
232
.IP ">: Growing logfile p+l+u+g+i+n+S"
246
.IP ">: Growing logfile p+ftype+l+u+g+i+n+S"
233
247
.IP "And also the following if you have mhash support enabled"
234
248
.IP "gost: gost checksum"
235
249
.IP "whirlpool: whirlpool checksum"
236
.IP "The followingg is available when explicitly enabled using configure"
250
.IP "The following are available and added to the default groups R, L and >
251
.IP "only when explicitly enabled using configure"
237
252
.IP "acl: access control list"
238
253
.IP "selinux: selinux attributes"
239
254
.IP "xattrs: extended attributes"
255
.IP "e2fsattrs: file attributes on a second extended file system
241
257
Please note that 'I' and 'c' are incompatible. When the name of a file
242
258
is changed, it's ctime is updated as well. When you put 'c' and 'I' in
added
removed
doc/aide.conf.5.in
