Skip to content

aide: add file integrity monitoring guide - #106

Open
Vairamani-NI wants to merge 1 commit into
ni:mainfrom
Vairamani-NI:add-aide-docs
Open

aide: add file integrity monitoring guide#106
Vairamani-NI wants to merge 1 commit into
ni:mainfrom
Vairamani-NI:add-aide-docs

Conversation

@Vairamani-NI

@Vairamani-NI Vairamani-NI commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Summary

Adds a user-facing documentation page for AIDE (Advanced Intrusion Detection Environment) on NILRT, wired into the Tutorials section of the docs.

The guide covers:

  • Installation via opkg
  • Creating and updating the baseline
  • Scheduled daily integrity checks
  • Checking status via syslog summaries and detailed reports
  • Understanding the report
  • Troubleshooting common issues

Notes

This PR is ready for review but should not be merged until the AIDE feature ships in a NILRT release.

Testing

Built locally with make -C docs html — build succeeds with no warnings.

Justification

AB#4005629

@jpautler

jpautler commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

Please update the PR description with an Azdo link.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds new NILRT documentation for using AIDE (file integrity monitoring) and links it into the main Tutorials toctree so it appears in the rendered docs.

Changes:

  • Add a new user-facing tutorial page describing AIDE installation, baseline creation, scheduled checks, report interpretation, and troubleshooting.
  • Wire the new AIDE page into the top-level Tutorials navigation.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
docs/source/index.rst Adds the AIDE tutorial page to the Tutorials toctree.
docs/source/aide/aide.rst New AIDE guide covering installation, usage, scheduled checks, and troubleshooting.
Suppressed comments (1)

docs/source/aide/aide.rst:135

  • In a bash code block, <package> will be treated as shell redirection if copied verbatim. Use a placeholder that can be pasted safely.
   opkg install <package>

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread docs/source/aide/aide.rst Outdated
Comment thread docs/source/aide/aide.rst Outdated

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

Suppressed comments (3)

docs/source/aide/aide.rst:76

  • This command does not open the timestamped report: in a shell, <timestamp> is parsed as input redirection, so cat receives malformed arguments. Use a command that actually selects the newest report.
   cat /var/log/aide/aide-check.<timestamp>.log

docs/source/aide/aide.rst:189

  • “Any opkg operation” incorrectly includes read-only commands such as opkg list and would tell users to perform an unnecessary 1–3 minute baseline rebuild. Match the earlier scope to package installs and upgrades.
This is expected. Rebuild the baseline after any ``opkg`` operation:

docs/source/aide/aide.rst:135

  • In this Bash block, <package> is interpreted as stdin redirection from a file named package, so the documented command fails if copied. Use a shell-safe placeholder.
   opkg install <package>

Comment thread docs/source/aide/aide.rst Outdated
Add a user-facing guide covering AIDE installation, checking status,
reading integrity reports, re-baselining after package installs,
scheduled check behaviour, and troubleshooting. Note that AIDE has
been available in the NILRT package feed since the 2026 Q4 release
and can be installed with opkg. Wire the page into the Tutorials toctree.

Signed-off-by: vairamani muthusamy <vairamani.muthusamy@emerson.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants