Another grading issue .. in aide lab ..

[SubuRama]

In Section 7.5 for the lab on AIDE, the very first test in the grading script /usr/local/lib/lab-aide-review has the following on line 89:

  if sshpass -p "redhat" ...    && sshpass -p "redhat" ${ssh} ${target} 'grep '"'"'^/etc[^/].*CONTENT_EX.*$'"'"' /etc/aide.conf

This grep expression will not match something like

 /etc/  CONTENT_EX

in /etc/aide.conf even though that entry in /etc/aide.conf works fine with aide

However, if I have (without the ending /)

/etc CONTENT_EX

the grep expression in the grading script succeeds.

What is the difference between /etc/ and /etc in the selection line?

man aide.conf doesn't tell me.

Thoughts?

Thank you

Subu

Subu

[carlos_arias]

Hi Subu, for aide configuration there is no significative difference between /etc and /etc/, and you can use them indistinctively. So don't consider the grading script as a failure if the monitoring is actually working.

Sometimes it's not possible to make scripts that consider all possible solutions. Not in this case, as the regexp could be extended to consider the final slash.

Trust your own skills, remember that during the exam you won't be provided with any grading scripts as help, and you will need to manually check that your solution is working and persistent across reboots.

Best regards,

Carlos

[MKLegion]

There is a difference if you are using directories with / or not, for an example:

/etc, then the regex will also recursively match all files and directories in the /etc directory.

With a forward slash (/) character like /etc/, the children of subdirectories will not be recursively matched. 

Best regards