[Integrit-users] Problem with integrit ignoring checksets

[Marcin O. <mar...@bg...>]

Hi,

I've been using successfully integrit for 2 years now but recently I
tried to set it up to monitor my /srv directory as follows:

file /etc/integrit/srv.list:
---------------------------------------

root=/srv
known=/var/lib/integrit/srv.cdb
current=/var/lib/integrit/srv-current.cdb                                                                                                                                                                            

/srv SIPLUGzAMC
---------------------------------------

I've set it that way cos /srv directory contains some huge files and I'd
like to cut down the runtime by avoiding unnecessary checks.

I just want to know if the file is still there or is removed and its
size. Plain as that, nothing more.

And the problem is that when invoked by:

integrit -C /etc/integrit/srv.list -u

the integrit merely ignores all of my settings that should omit unwanted
checks and produces output similar to the one here:

/srv/filename i(5187) p(660) l(1) u(0) g(25) z(2342320)
a(20040121-021359) m(20020314-225656) c(20040311-050315)

in each line. Why? I only wanted the filesize. Is there anything I'm
doing wrong?

-- 
Best regards,
Martin Orda
http://www.securityshells.com