[Integrit-users] integrit 4 and multiple roots

[Yuri D'E. <wa...@us...>]

In article 
<51c...@ma...>,
 "Ed L. Cashin" <ec...@no...> wrote:

> One thing about integrit is that it doesn't change much (by design),
> so it seems perfectly appropriate to release now.  Waiting for more
> significant changes might take a while and would deny today's users
> the benefit of the recent productive dialog.

Yes, but to a degree. I'm a bit disgruntled by the amount of stuff that 
breaks for no or little reason. If you count the number of components of 
a typical unix system, all developed without coordination, you see why 
you *need* a distribution today, while I was used to build everything 
from scratch years ago without the typical upgrade pain you feel today.

... anyway ... :)

I may have found a simpler solution to the multiple-roots problem. I 
have the need of multiple roots in a couple of places, mostly because I 
don't want to include an entire tree and then ignore _every_ single file 
in it just to monitor the branch I want.

It may be as simple as adding an "additive" rule, which we don't have 
right now. Consider:

root=/
!/var
+/var/lib [flags]

which in turn could be useful when used this way:

root=/
!/
+/home
+/usr/local
!/usr/local/var

In practice, this requires only minimal changes to walk_file_tree, in 
order to be restarted for each additive rule which is (really) shadowed 
by a previous exclusion.