integrit for Debian ------------------- A program like integrit must be suited for each system. Therefore the supplied configuration file /etc/integrit/integrit.conf is just an example, and the example daily cron job to check the filesystem for changes is disabled. Please read and understand the integrit documentation before proceeding. See /usr/share/doc/integrit/integrit.html for the big picture, see the man pages for integrit(1), i-viewdb(1), and i-ls(1), and look at the examples in /usr/share/doc/integrit/examples/. Obviously simply running integrit from cron and mailing a report to some mail address isn't the best way to run integrit, but it's a kind of general configuration a package can provide, and it's what this package provides. It's recommended to adapt the configuration, schedule, and strategy to run integrit to your individual needs. In order to enable the example daily cron job, first provide one or more valid configuration file(s) for integrit. To do so, either edit the example config file /etc/integrit/integrit.conf, and set ``root'', ``known'', ``current'', and some rules, or copy one or more configuration files from /usr/share/doc/integrit/etc/ into /etc/integrit/. Then edit /etc/integrit/integrit.debian.conf and add your configuration files to the CONFIGS variable (optionally adapt the other setting in this file), and run the cron job manually once in a shell, e.g.: # grep ^CONFIGS /etc/integrit/integrit.debian.conf CONFIGS="/etc/integrit/etc.conf /etc/integrit/usr.conf" # /etc/cron.daily/integrit This will create the initial state of the databases. You can test your configuration by running the cron job again in a shell. Thanks to Andras Bali for initially packaging integrit for Debian. -- Gerrit Pape , Sat, 24 May 2003 14:03:41 +0200