#11 Changed files when running aide with --check

open
nobody
None
5
2010-12-08
2010-12-08
Anonymous
No

I'm having trouble with aide version 0.14 I installed on a newly loaded Red Hat Enterprise Linux 6 box. I installed aide using yum from Red Hat's repositories, and the trouble that I'm having is that when I run aide with --check, right after running it with --init and making a copy of the database, I get a list of 59 files that have changed. I'm using the exact same process that I did in my RHEL 5 loads where this doesn't happen. So I have two questions, first, is there a way to check what is making the changes to these files? I have a feeling that there's something Red Hat specific going on but I don't know enough about the differences between RHEL 5 and RHEL 6 to know what that might be. Also, could it really be some running process? I've tried booting into run level 3 and sshing into the machine to do this and I still get a list of changed files. I've attached this list of changed files for reference.

Discussion

  •  
    Attachments