AIDE is an acronym for Advanced Intrusion Detection Environment. It is a system that detects changes to files on the local system.
AIDE sets up the database based on regular expression rules in the configuration file. It can be used to check for legitimate changes of files after the database is created. It uses several message algorithms such as md5, sha1, rmd160, tiger, haval, to check file integrity.
Here at Ibmi Media, as part of our Server Management Services, we regularly help our Customers to perform related Software Installation queries.
In this context, we shall look into how to Install AIDE on Ubuntu 20.04.
1. Perform system update
Run the apt command to update packages:
$ sudo apt update
2. Install AIDE
Run the apt command to install AIDE:
$ sudo apt install aide
Press Enter, then it will show the Postfix Configuration table where you can provide your mail name then press Enter
1. You need to check your AIDE version:
$ aide -v
2. Create a new AIDE database by using the aideinit script:
$ sudo aideinit
3. To install new AIDE database, you must copy it to place:
$ sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db
4. Update the AIDE configuration:
$ sudo update-aide.conf
5. Copy the AIDE configuration file to another directory
$ sudo cp /var/lib/aide/aide.conf.autogenerated /etc/aide/aide.conf
1. Manual database check based on the new configuration:
$ aide -c /etc/aide/aide.conf -C
2. Update the database:
$ sudo aide -c /etc/aide/aide.conf --update
3. Check database entries for match /etc:
$ aide -c /etc/aide/aide.conf --limit /etc --check
This article covers how to install AIDE on Ubuntu 20.04. In fact, AIDE is an intrusion detection system that detects changes to files on the local system. It creates a database from the regular expression rules that it finds from the config file. Once this database is initialized it can be used to verify the integrity of the files. It has several message digest algorithms (md5, sha1, rmd160, tiger, haval, etc.) that are used to check the integrity of the file.