osec(1)

OSEC(1)

User Commands

OSEC(1)

NAME

osec - lightweight integrity checking system

SYNOPSIS

osec [OPTIONS] [DIRECTORY...]
osec [OPTIONS] --file=FILE [DIRECTORY...]
osec [OPTIONS] -V -D DBFILE -f LISTFILE

DESCRIPTION

Osec also adds an ability of checking system for the dangerous files, e.g. suid, sgid and world writeable

If you run osec under root acount, then this program will work under non-privilegy user with only one extra capability 'dac_read_search', so osec cannot damage any system file on internal errors.

This utility help you to see difference between two states of your system.

OPTIONS

-r, --read-only: work in read-only mode;
-R, --allow-root: allow run with root priveleges;
-n, --numeric-ids: dont convert uid/gid into username;
-u, --user=USER: non-privelege user account name;
-g, --group=GROUP: non-privelege group account name;
-D, --dbpath=PATH: path to the directory with databases (or the database file in virtual directory mode);
-f, --file=FILE: obtain directories from file FILE (or the list of files in virtual directory mode);
-x, --exclude=PATTERN: exclude files matching PATTERN (ignored in virtual directory mode);
-X, --exclude-from=FILE: read exclude patterns from FILE (ignored in virtual directory mode);
-i, --ignore=LIST: dont show changes: checksum, symlink, user, group, mode, mtime or inode;
-t, --hash-type=NAME: use specified hash type, currently supported hash types: sha1, sha256, sha512, stribog512, default is sha1;
-V, --virtual: virtual directory mode;
-v, --version: print program version and exit;
-h, --help: output a brief help message.

AUTHOR

Written by Alexey Gladkov <gladkov.alexey@gmail.com> Modified by Aleksei Nikiforov <darktemplar@basealt.ru> Modified by Paul Wolneykien <manowar@altlinux.org>

COPYRIGHT

This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

July 2024

osec 1.3.2.1