[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
find file changes
From: |
Hermann Biller |
Subject: |
find file changes |
Date: |
Tue, 9 Oct 2001 14:54:19 +0200 (MES) |
dear cfengine users:
here is a simple example to check files:
#################################################################
# cfengine version 2.0.a14
#
# cf.filemonitor
#
# cfengine script to monitor changes of given system configuration files
#
#################################################################
files:
AllMachines.FileMonitor::
/etc/TIMEZONE checksum=md5
/etc/aliases checksum=md5
/etc/auto_master checksum=md5
/etc/bootparams checksum=md5
/etc/bootptab checksum=md5
/etc/datemsk checksum=md5
... 80 other files
output:
testhost root etc/cfengine # cfagent -DFileMonitor
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /etc/hosts changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /etc/inet/hosts changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /apps/sysadmin/etc/cfengine/cf.main
changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /apps/sysadmin/etc/cfengine/cf.groups
changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for
/apps/sysadmin/etc/cfengine/cf.solaris changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for
/apps/sysadmin/etc/cfengine/cf.filecheck changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
there are some open questions.
- contrary to the documentation (files:checksum) the checksum will
not be updated in the database.
the same alert occurs also at the next run
- files which were deleted are not displayed
- files with changed permissions are not displayed
note: it would not be a nice solution if the ownership has be defined
for each and every file. some ideas?
regards, hermann
- find file changes,
Hermann Biller <=
- Re: find file changes, Tony, 2001/10/09
- Re: find file changes, Mark . Burgess, 2001/10/09
- Re: find file changes, Tony, 2001/10/09
- Re: find file changes, Hermann Biller, 2001/10/10
- Re: find file changes, Mark . Burgess, 2001/10/10
- Re: find file changes, Hermann Biller, 2001/10/10
- Re: find file changes, Adrian Phillips, 2001/10/10
- Re: find file changes, Ted Zlatanov, 2001/10/10
- Re: find file changes, Mark Rowlands, 2001/10/10
- Re: find file changes, Ronan KERYELL, 2001/10/12