...The baseline and check behavior are controlled by a policy file, which specifies which files or directories to monitor, and which attributes to monitor them, such as hashes, file permissions, and ownership. When an expected change occurs, such as upgrading a package, the baseline database can be updated to the new known-good state. The policy can also be updated, for example, to reduce noise or cover a newly installed package.