AIDE (Advance Intrustion Detection Environment) - Installation

Go to sourceforge.net and search for AIDE.  Download both the aide...tar.gz and the aide....asc file so that we can verify if we have downloaded the correct file.

http://sourceforge.net/projects/aide/files/aide/0.15.1/
http://sourceforge.net/projects/aide/files/PGP  key/
[bala@localhost AIDE]$ gpg --import aide-2011_0xF4474E5A.asc
gpg: directory `/home/bala/.gnupg' created
gpg: new configuration file `/home/bala/.gnupg/gpg.conf' created
gpg: WARNING: options in `/home/bala/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/home/bala/.gnupg/secring.gpg' created
gpg: keyring `/home/bala/.gnupg/pubring.gpg' created
gpg: /home/bala/.gnupg/trustdb.gpg: trustdb created
gpg: key F4474E5A: public key "Aide Developers " imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
gpg: no ultimately trusted keys found
[bala@localhost AIDE]$ gpg --list-keys
/home/bala/.gnupg/pubring.gpg
-----------------------------
pub   4096R/F4474E5A 2011-01-30 [expires: 2012-01-31]
uid                  Aide Developers
[bala@localhost AIDE]$ gpg --verify aide-0.15.1.tar.gz.asc aide-0.15.1.tar.gz
gpg: Signature made Monday 13 September 2010 11:35:07 PM IST using DSA key ID CBF11FCD
gpg: Good signature from "Aide Developers <aide-devel@lists.sourceforge.net>"
gpg: Note: This key has expired!
Primary key fingerprint: 4D05 1BA3 1D8C E060 A99F  6668 9FC1 CC3D CBF1 1FCD
[bala@localhost AIDE]$ tar -xzvf aide-0.15.1.tar.gz

Next AIDE requires the help of mhash let us download that from http://sourceforge.net/projects/mhash/

[bala@localhost AIDE]$ tar -xjvf mhash-0.9.9.9.tar.bz2

[bala@localhost mhash-0.9.9.9]$ ./configure

[bala@localhost mhash-0.9.9.9]$ make

[bala@localhost mhash-0.9.9.9]$ make install

Now that we have installed mhash we will proceed with installing AIDE

bala@localhost aide-0.15.1]$ ./configure
checking for bison... no
checking for byacc... no
AIDE requires GNU bison
[bala@localhost aide-0.15.1]$ su
Password:
[root@localhost aide-0.15.1]# yum install bison flex

After a lot of fighting and surfing found that I need to add the bolded letters.

[root@localhost aide-0.15.1]$ ./configure --without-zlib --disable-static
[root@localhost aide-0.15.1]$ make

[root@localhost aide-0.15.1]# make install
[root@localhost aide-0.15.1]# ls -ltrh /usr/local/bin/
-rwxr-xr-x 1 root root 382K Oct  7 00:26 aide
[root@localhost aide-0.15.1]# md5sum /usr/local/bin/aide > md5sum_aide.txt
[root@localhost aide-0.15.1]# cat md5sum_aide.txt
34cf97cdf3ae7dbc9e8872a4c9a71a87  /usr/local/bin/aide