integrit file verification system

File Release Notes and Changelog

Release Name: 2.00.00-beta

Notes:
This is the initial release of integrit version two.  When this beta
has earned its stripes, I'll brag more about what's new, but here's a
quick listing, with the one's people asked for listed first.

list of notable changes:

  Added feature: non-inherited checksets.  Now if there's a directory
  (like /etc on RedHat) that requires special treatment that doesn't
  percolate into the directory's files and subdirectories, you can
  prefix the rule with a dollar sign to signify that the rule does not
  cascade.  You can have both a cascading and a non-cascading rule for
  any given directory.

  Added feature: now known and current databases can be specified on
  the command line, overriding the settings in the configuration file.
  This feature is for sysadmins who want to use the same configuration
  file on many similar hosts.

  Removed cdb-0.75 from integrit.  integrit now uses its own cdb
  routines and some modified versions of DJB's public domain source
  files.  This eliminates some hairy licensing issues without
  effecting integrit's operation.

  New feature: lowering the verbosity level with "-q" eliminates the
  pre-amble in the human-readable report.

  integrit's use of openssl has been removed.  integrit now uses md5
  and sha1 checksums adapted from those of gnupg-1.0.6.
  
  Added build feature: you can change the maximum file size that will
  be mmap'ed with a configure option.  Specifying a maximum of zero
  means that mmap won't be used.  You can conserve virtual memory this
  way.

  The build process is more sophisticated.

  Added build feature: configure option for specifying install script
  to use if autoconf finds one that doesn't really work (e.g., Stata's
  "install" program was in my path once).  Updated hashtbl's "make
  install" stuff to use install.

  The hashtbl library: two related new features: a "foreach" feature,
  where a callback can be executed on each element in the hash table,
  and an optional "destroy item" callback.

  The callback for destroying items allows the caller to store complex
  data structures in the hash table and then pass a pointer to a
  specialized cleanup routine to hashtbl_free.

  Auxiliary tools now build properly with leak detection turned on.



Changes:
-----------------------------------------------------------------
Mon Jun 18 18:39:01 EDT 2001

Added feature: you can change the maximum file size that will be
mmap'ed with a configure option.  Specifying a maximum of zero means
that mmap won't be used.  You can conserve virtual memory this way.

Added feature: non-inherited checksets.

-----------------------------------------------------------------
Sun Jun 17 17:40:43 EDT 2001

Using stdio's fwrite for buffered output in cdb_make stuff.

-----------------------------------------------------------------
Sat Jun 16 13:57:16 EDT 2001

Added feature: build process now includes more sophisticated
dependency juggling.  

This is most noticed with headers, e.g., after building everything, if
you change cdb_seq.h and run "make aux", then the files depending on
that header will be rebuilt: missing.o; cdb_seq.o; viewdb.o; and
viewdb.  :)

Some unneeded complexity has been removed from the build process: aux
no longer has its own configure script.

The object files that are shared between integrit itself and the
auxiliary programs is now in a library, "libintegrit.a".

Added configure option for specifying install script to use if
autoconf finds one that doesn't really work (e.g., Stata's "install"
program was in my path once).  Updated hashtbl's "make install"
stuff to use install.

Added feature: now known and current databases can be specified on the
command line, overriding the settings in the configuration file.  This
feature is for sysadmins who want to use the same configuration file
on many similar hosts.

-----------------------------------------------------------------
Fri Jun 15 20:38:18 EDT 2001

The hashtbl library has two related new features: a "foreach" feature,
where a callback can be executed on each element in the hash table,
and an optional "destroy item" callback.

The callback for destroying items allows the caller to store complex
data structures in the hash table and then pass a pointer to a
specialized cleanup routine to hashtbl_free.

Auxiliary tools now build properly with leak detection turned on.

-----------------------------------------------------------------
Thu Jun 14 13:45:58 EDT 2001

Big changes: removed cdb-0.75 from integrit.  integrit now uses its
own cdb routines and some modified versions of DJB's public domain
sources.

integrit's use of openssl has been removed.  integrit now uses md5 and
sha1 checksums adapted from those of gnupg-1.0.6.

Memory-leak finding support has been added to the auxiliary tools. 

Miscellaneous cleaning up.

Changing major version number to two.

New feature: using -q and -v flags to change verbosity level does
something now: lowering the level with "-q" eliminates the pre-amble
in the human-readable report.