integrit 4.1-1build1 / usr / share / doc / integrit / README.Debian

integrit for Debian
-------------------

A program like integrit must be suited for each system.  Therefore the
supplied configuration file /etc/integrit/integrit.conf is just an example,
and the example daily cron job to check the filesystem for changes is
disabled.

Please read and understand the integrit documentation before proceeding.
See /usr/share/doc/integrit/integrit.html for the big picture, see the
man pages for integrit(1), i-viewdb(1), and i-ls(1), and look at the
examples in /usr/share/doc/integrit/examples/.

Obviously simply running integrit from cron and mailing a report to some
mail address isn't the best way to run integrit, but it's a kind of
general configuration a package can provide, and it's what this package
provides.  It's recommended to adapt the configuration, schedule, and
strategy to run integrit to your individual needs.

In order to enable the example daily cron job, first provide one or
more valid configuration file(s) for integrit.  To do so, either edit
the example config file /etc/integrit/integrit.conf, and set ``root'',
``known'', ``current'', and some rules, or copy one or more configuration
files from /usr/share/doc/integrit/etc/ into /etc/integrit/.

Then edit /etc/integrit/integrit.debian.conf and add your configuration
files to the CONFIGS variable (optionally adapt the other setting in
this file), and run the cron job manually once in a shell, e.g.:

 # grep ^CONFIGS /etc/integrit/integrit.debian.conf
 CONFIGS="/etc/integrit/etc.conf /etc/integrit/usr.conf"
 # /etc/cron.daily/integrit

This will create the initial state of the databases.

You can test your configuration by running the cron job again in a shell.

Thanks to Andras Bali for initially packaging integrit for Debian.

 -- Gerrit Pape <pape@smarden.org>, Sat, 24 May 2003 14:03:41 +0200