- use mktemp and /tmp dir for creating temporary files

  (don't use /var/lib/aide for this purpose)

Changed files:
    aide-check -> 1.7

diff --git a/aide-check b/aide-check
index bf5dcb55c5f733d4bd2f4c5e2a7e31477063efd3..ecd92992540d80b3ba83a3110a5e9928d3e3b18f 100644 (file)
--- a/aide-check
+++ b/aide-check
@@ -7,16 +7,19 @@ DATA=`date`
 SYSTEM=`hostname`
 
 if [ -f /var/lib/aide/aide.db ]; then
- nice -20 /usr/bin/aide --$AIDE_WORK_MODE >/var/lib/aide/$$
- LIN=`grep -c . /var/lib/aide/$$`
+ umask 177
+ TMPFILE="$( mktemp /tmp/aide-check-XXXXXX )"
+ trap "rm -f $TMPFILE" 0
+ nice -20 /usr/bin/aide --$AIDE_WORK_MODE > "$TMPFILE"
+ LIN="$( grep -c . "$TMPFILE" )"
  if [ "$LIN" -gt "1" ]; then
-     mail -s "AIDE $SYSTEM $DATA" $AIDE_MAILTO </var/lib/aide/$$
- fi
- rm -f /var/lib/aide/$$
- if [ $AIDE_WORK_MODE = "update" ] && [ $AIDE_MOVEDB = "yes" ]; then
-     mv -f /var/lib/aide/aide.db.new /var/lib/aide/aide.db
+     mail -s "AIDE $SYSTEM $DATA" $AIDE_MAILTO < "$TMPFILE"
  fi
+ rm -f "$TMPFILE"
+ trap - 0
 else
  nice -20 /usr/bin/aide --init
- mv -f /var/lib/aide/aide.db.new /var/lib/aide/aide.db
+fi
+if [ $AIDE_WORK_MODE = "update" ] && [ $AIDE_MOVEDB = "yes" ]; then
+     mv -f /var/lib/aide/aide.db.new /var/lib/aide/aide.db
 fi