System and Software Integrity

$ rpm -Va --noconfig | grep '^..5'

$ rpm -qf FILENAME

$ sudo zypper reinstall PACKAGENAME

$ sudo rpm -Uvh PACKAGENAME

rpm -Va | awk '{ if (substr($0,6,1)=="U" || substr($0,7,1)=="G") print $NF }'

$ rpm -qf FILENAME

$ sudo rpm --setugids PACKAGENAME

$ sudo rpm -Va | awk '{ if (substr($0,2,1)=="M") print $NF }'

$ rpm -qf FILENAME

$ sudo rpm --setperms PACKAGENAME

$ sudo zypper install aide

$ sudo /usr/bin/aide --init

$ sudo cp /var/lib/aide/aide.db.new /var/lib/aide/aide.db

$ sudo /usr/bin/aide --check

 | /bin/mail -s "$(hostname) - AIDE Integrity Check" root@localhost

05 4 * * * root /usr/sbin/aide --check | /bin/mail -s "$(hostname) - AIDE Integrity Check" root@localhost

FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256

FIPSR = p+i+n+u+g+s+m+c+acl+selinux+xattrs+sha256

OnCalendar=*-*-* 05:00:0

[Timer]