273 |
# |
# |
274 |
# check file httpd_bin with path /usr/local/apache/bin/httpd |
# check file httpd_bin with path /usr/local/apache/bin/httpd |
275 |
# checksum and expect the sum 8f7f419955cefa0b33a2ba316cba3659 |
# checksum and expect the sum 8f7f419955cefa0b33a2ba316cba3659 |
276 |
# permission 755 |
# if failed permission 755 then stop |
277 |
# if failed uid root then stop |
# if failed uid root then stop |
278 |
# if failed gid root then stop |
# if failed gid root then stop |
279 |
# if size changed then alert |
# if size changed then alert |
280 |
# if timestamp changed then alert |
# if timestamp changed then alert |
281 |
# alert sysadm@foo.bar |
# alert sysadm@foo.bar |
282 |
# alert security@foo.bar on { checksum, permission, size, timestamp } |
# alert security@foo.bar on { checksum, permission, size, timestamp, uid, gid } |
283 |
# with the mail-format { subject: Alarm! } |
# with the mail-format { subject: Alarm! } |
284 |
# group server |
# group server |
285 |
# |
# |
298 |
# check device datafs with path /dev/sdb1 |
# check device datafs with path /dev/sdb1 |
299 |
# start program = "/bin/mount /data" |
# start program = "/bin/mount /data" |
300 |
# stop program = "/bin/umount /data" |
# stop program = "/bin/umount /data" |
301 |
# permission 660 |
# if failed permission 660 then stop |
302 |
# if failed uid root then stop |
# if failed uid root then stop |
303 |
# if failed gid disk then stop |
# if failed gid disk then stop |
304 |
# if space usage > 80 % then alert |
# if space usage > 80 % then alert |
310 |
# |
# |
311 |
# |
# |
312 |
# check device rootfs with path /dev/sda1 |
# check device rootfs with path /dev/sda1 |
313 |
# permission 660 |
# if failed permission 660 then alert |
314 |
# if failed uid root then alert |
# if failed uid root then alert |
315 |
# if failed gid disk then alert |
# if failed gid disk then alert |
316 |
# if space usage > 3 GB then alert |
# if space usage > 3 GB then alert |
320 |
# |
# |
321 |
# |
# |
322 |
# check file database with path /data/mydatabase.db |
# check file database with path /data/mydatabase.db |
323 |
# permission 700 |
# if failed permission 700 then alert |
324 |
# if failed uid data then alert |
# if failed uid data then alert |
325 |
# if failed gid data then alert |
# if failed gid data then alert |
326 |
# if size > 100 MB then alert |
# if size > 100 MB then alert |
329 |
# |
# |
330 |
# |
# |
331 |
# check directory bin with path /bin |
# check directory bin with path /bin |
332 |
# permission 755 |
# if failed permission 755 then alert |
333 |
# if failed uid 0 then alert |
# if failed uid 0 then alert |
334 |
# if failed gid 0 then alert |
# if failed gid 0 then alert |
335 |
# alert root@localhost |
# alert root@localhost |