AIDE is an acronym for Advanced Intrusion Detection Environment. It is a system that detects changes to files on the local system.
AIDE sets up the database based on regular expression rules in the configuration file. It can be used to check for legitimate changes of files after the database is created. It uses several message algorithms such as md5, sha1, rmd160, tiger, haval, to check file integrity.
Here at Ibmi Media, as part of our Server Management Services, we regularly help our Customers to perform related Software Installation queries.
In this context, we shall look into how to Install AIDE on Ubuntu 20.04.
How to install AIDE on Ubuntu ?
1. Perform system update
Run the apt command to update packages:
$ sudo apt update
2. Install AIDE
Run the apt command to install AIDE:
$ sudo apt install aide
Press Enter, then it will show the Postfix Configuration table where you can provide your mail name then press Enter
How to configure AIDE ?
1. You need to check your AIDE version:
$ aide -v
2. Create a new AIDE database by using the aideinit script:
$ sudo aideinit
3. To install new AIDE database, you must copy it to place:
$ sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db
4. Update the AIDE configuration:
$ sudo update-aide.conf
5. Copy the AIDE configuration file to another directory
$ sudo cp /var/lib/aide/aide.conf.autogenerated /etc/aide/aide.conf
How to test AIDE ?
1. Manual database check based on the new configuration:
$ aide -c /etc/aide/aide.conf -C
2. Update the database:
$ sudo aide -c /etc/aide/aide.conf --update
3. Check database entries for match /etc:
$ aide -c /etc/aide/aide.conf --limit /etc --check
[Need assistance in installing any Software on your Linux system ? We can help you. ]