Red Hat Training

A Red Hat training course is available for Red Hat Enterprise Linux

9.3. Performing Integrity Checks

To initiate a manual check, enter the following command as root:
~]# aide --check
AIDE found differences between database and filesystem!!
Start timestamp: 2017-04-07 17:11:33

  Total number of files:	104892
  Added files:			7
  Removed files:		0
  Changed files:		52
At a minimum, AIDE should be configured to run a weekly scan. At most, AIDE should be run daily. For example, to schedule a daily execution of AIDE at 4:05 am using cron (see the Automating System Tasks chapter in the System Administrator's Guide), add the following line to /etc/crontab:
05 4 * * * root /usr/sbin/aide --check