Editing Linux:Desktop Tips (section)

==== Intrusion detection ====
* '''AIDE'''
** There's a free alternative to commercial intrusion detection tools like Tripwire and so on, which is called AIDE:
:: The setup isn't complicated at all, here's a very good howto link from Fedora: https://docs.fedoraproject.org/en-US/quick-docs/aide-checking-file-integrity/
:: The commands for the initial setup/test:
:: <pre>$ sudo dnf install aide; sudo aide --init; sudo mv /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz; sudo aide --check</pre>
:: After a system update or config file changes, a new aide database has to be created:
:: <pre>$ sudo aide --update; sudo mv /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz</pre>
:: For a daily check add this in the /etc/crontab file (I prefer my typical lunch time for this ;-) )
:: <pre>00 13 * * * /usr/sbin/aide --check</pre>