NAME

osec - lightweight integrity checking system

SYNOPSIS

osec [OPTIONS] [DIRECTORY...]
osec [OPTIONS] --file=FILE [DIRECTORY...]

DESCRIPTION

Osec also adds an ability of checking system for the dangerous files, e.g. suid, sgid and world writeable

If you run osec under root acount, then this program will work under non-privilegy user with only one extra capability 'dac_read_search', so osec cannot damage any system file on internal errors.

This utility help you to see difference between two states of your system.

OPTIONS

-r, --read-only

work in read-only mode;

-R, --allow-root

allow run with root priveleges;

-n, --numeric-ids

dont convert uid/gid into username;

-u, --user=USER

non-privelege user account name;

-g, --group=GROUP

non-privelege group account name;

-D, --dbpath=PATH

path to the directory with databases;

-f, --file=FILE

obtain directories from file FILE;

-x, --exclude=PATTERN

exclude files matching PATTERN;

-X, --exclude-from=FILE

read exclude patterns from FILE;

-i, --ignore=LIST

dont show changes: checksum, symlink, user, group, mode, mtime or inode;

-t, --hash-type=NAME

use specified hash type, currently supported hash types: sha1, sha256, sha512, stribog512, default is sha1;

-v, --version

print program version and exit;

-h, --help

output a brief help message.

AUTHOR

Written by Alexey Gladkov <gladkov.alexey@gmail.com> Modified by Aleksei Nikiforov <darktemplar@basealt.ru>

COPYRIGHT

Copyright © 2008-2020 Alexey Gladkov <gladkov.alexey@gmail.com>
Copyright © 2019 Aleksei Nikiforov <darktemplar@basealt.ru>

This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.