{{{ oval_metadata("By default, AIDE does not install itself for periodic execution. Periodically running AIDE is necessary to reveal unexpected changes in installed files. ") }}}
/etc/crontab
^(([0-9]*[\s]*[0-9]*[\s]*\*[\s]*\*[\s]*(\*|([0-7]|mon|tue|wed|thu|fri|sat|sun)|[0-7]-[0-7]))|@(hourly|daily|weekly))[\s]*root[\s]*{{{ aide_bin_path | replace("/", "\/") }}}[\s]*\-\-check.*$
1
/etc/cron.d
^.*$
^(([0-9]*[\s]*[0-9]*[\s]*\*[\s]*\*[\s]*(\*|([0-7]|mon|tue|wed|thu|fri|sat|sun)|[0-7]-[0-7]))|@(hourly|daily|weekly))[\s]*root[\s]*{{{ aide_bin_path | replace("/", "\/") }}}[\s]*\-\-check.*$
1
/var/spool/cron/root
^(([0-9]*[\s]*[0-9]*[\s]*\*[\s]*\*[\s]*(\*|([0-7]|mon|tue|wed|thu|fri|sat|sun)|[0-7]-[0-7]))|@(hourly|daily|weekly))[\s]*(root)?[\s]*{{{ aide_bin_path | replace("/", "\/") }}}[\s]*\-\-check.*$
1
^/etc/cron.(daily|weekly)$
^.*$
^[^#]*{{{ aide_bin_path | replace("/", "\/") }}}\s+\-\-check\s*$
1