AIDE (Advanced Intrusion Detection Environment) To Verify The Integrity Of Files

AIDE (Advanced Intrusion Detection Environment) To Verify The Integrity Of Files

AIDE is a file and directory integrity checker.

What does it do?

It creates a database from the regular expression rules that it finds from the config file(s). Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (see below) that are used to check the integrity of the file. All of the usual file attributes can also be checked for inconsistencies. It can read databases from older or newer versions. See the manual pages within the distribution for further info.

Features

• supported message digest algorithms: md5, sha1, rmd160, tiger, crc32, sha256, sha512, whirlpool (additionally with libmhash: gost, haval, crc32b)
• supported file attributes: File type, Permissions, Inode, Uid, Gid, Link name, Size, Block count, Number of links, Mtime, Ctime and Atime
• support for Posix ACL, SELinux, XAttrs and Extended file system attributes if support is compiled in
• plain text configuration files and database for simplicity
• powerful regular expression support to selectively include or exclude files and directories to be monitored
• gzip database compression if zlib support is compiled in
• stand alone static binary for easy client/server monitoring configurations

AIDE is included in the following distributions. Please use the corresponding command to install AIDE.

• Debian GNU/Linux | Ubuntu: apt-get install aide or aptitude install aide
• Gentoo: emerge aide
• MacPorts: port install aide
• FreeBSD: pkg_add -r aide
• Red Hat | CentOS | Fedora: yum install aide
• openSUSE: zypper install aide
• IPCop: see here for installation guidelines

Download