284 |
# check device datafs with path /dev/sdb1 |
# check device datafs with path /dev/sdb1 |
285 |
# start program = "/bin/mount /data" |
# start program = "/bin/mount /data" |
286 |
# stop program = "/bin/umount /data" |
# stop program = "/bin/umount /data" |
287 |
|
# permission 660 |
288 |
# if space usage > 80 % then alert |
# if space usage > 80 % then alert |
289 |
# if space usage > 99 % then stop |
# if space usage > 99 % then stop |
290 |
# if inode usage > 80 % then alert |
# if inode usage > 80 % then alert |
294 |
# |
# |
295 |
# |
# |
296 |
# check device rootfs with path /dev/sda1 |
# check device rootfs with path /dev/sda1 |
297 |
|
# permission 660 |
298 |
# if space usage > 3 GB then alert |
# if space usage > 3 GB then alert |
299 |
# if inode usage > 30000 then alert |
# if inode usage > 30000 then alert |
300 |
# mode passive |
# mode passive |
302 |
# |
# |
303 |
# |
# |
304 |
# check file su with path /bin/su |
# check file su with path /bin/su |
305 |
# perm 4755 |
# permission 4755 |
306 |
|
# if size changed then alert |
307 |
|
# if timestamp changed then alert |
308 |
|
# checksum /bin/su and expect cd6ee4b7a38964be2f9a0f7f4c4a8301 |
309 |
|
# alert root@localhost |
310 |
|
# |
311 |
|
# |
312 |
|
# check file database with path /data/database |
313 |
|
# permission 700 |
314 |
|
# if size > 100 MB then alert |
315 |
|
# if timestamp "/data/database" > 15 minutes then alert |
316 |
# alert root@localhost |
# alert root@localhost |
317 |
# |
# |
318 |
# |
# |
319 |
# check directory bin with path /bin |
# check directory bin with path /bin |
320 |
# perm 755 |
# permission 755 |
321 |
# alert root@localhost |
# alert root@localhost |