Software Integrity Checking

$ rpm -Va --noconfig | grep '^..5'

$ rpm -qf FILENAME

$ sudo yum reinstall PACKAGENAME

$ sudo rpm -Uvh PACKAGENAME

rpm -Va | awk '{ if (substr($0,6,1)=="U" || substr($0,7,1)=="G") print $NF }'

$ rpm -qf FILENAME

$ sudo rpm --setugids PACKAGENAME

$ sudo rpm -Va | awk '{ if (substr($0,2,1)=="M") print $NF }'

$ rpm -qf FILENAME

$ sudo rpm --setperms PACKAGENAME

$ sudo yum install aide

$ sudo /usr/sbin/aide --init

$ sudo cp /var/lib/aide/aide.db.new.gz /var/lib/aide/aide.db.gz

$ sudo /usr/sbin/aide --check

05 4 * * * root /usr/sbin/aide --check

05 4 * * 0 root /usr/sbin/aide --check

 | /bin/mail -s "$(hostname) - AIDE Integrity Check" root@localhost

05 4 * * * root /usr/sbin/aide --check | /bin/mail -s "$(hostname) - AIDE Integrity Check" root@localhost

NORMAL = FIPSR+sha512

FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256

FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256