The Global rules tab lists the built-in, best-practice rule groups that ship with the feature.
Each group bundles a set of paths that belong together (system binaries, account files, SSH, web, FTP, volatile exclusions…) and can be turned on or off as a unit.
¶ Concept
Rather than making you write raw AIDE selectors, Artica seeds curated groups derived from CIS/hardening guidance:
- System binaries (critical) —
/bin,/sbin,/usr/bin,/usr/sbin,/lib… - Accounts & secrets (critical) —
/etc/passwd,/etc/shadow,/etc/group. - Init & systemd, SSH, web, FTP (high) — service configuration and keys.
- Volatile exclusions (on by default) — excludes
/proc,/sys,/dev,/run,/tmp, log and database paths so the queue is not flooded with expected churn. Keep this enabled unless you have a specific reason not to.
¶ How to use it
- Toggle a group's checkbox to include or exclude it from the generated configuration.
- Changes take effect after a Reconfigure (header button on the Dashboard) — this regenerates
aide.conf. - For paths specific to your deployment, use the Custom rules tab instead of editing the built-ins.