Menu

Tree [1d1806] master /
 History

HTTPS access


File Date Author Commit
 contrib 2011-11-23 Alexey Gladkov Alexey Gladkov [bb0184] Add specfile for redhat
 data 2012-11-07 Alexey Gladkov Alexey Gladkov [996579] Don't report about new files if we init databas...
 debian 2009-08-28 Alexey Gladkov Alexey Gladkov [86e31e] Merge branch 'lakostis'
 src 2013-02-11 Alexey Gladkov Alexey Gladkov [1d1806] Fix incorrect use of xattr_nonexistent
 update 2013-01-17 Alexey Gladkov Alexey Gladkov [df33b0] Fix distcheck
 .gear-rules 2008-06-04 Alexey Gladkov Alexey Gladkov [fdf5af] Add gear rules
 .gitignore 2013-02-11 Alexey Gladkov Alexey Gladkov [44a0e2] Add utitlity to get version of database
 AUTHORS 2008-05-14 Alexey Gladkov Alexey Gladkov [7699c8] Add copyright information
 COPYING 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 ChangeLog 2009-08-28 Alexey Gladkov Alexey Gladkov [9195a2] Update ChangeLog
 INSTALL 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 Makefile.am 2008-06-01 Alexey Gladkov Alexey Gladkov [3667d0] Add converter from an old database format to ne...
 NEWS 2013-01-17 Alexey Gladkov Alexey Gladkov [f533cd] Version 1.2.5
 README 2012-11-07 Alexey Gladkov Alexey Gladkov [d83c9e] Update project requires
 TODO 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 autogen.sh 2011-11-23 Alexey Gladkov Alexey Gladkov [9742e2] Add autogen script
 config.h.in 2012-11-07 Alexey Gladkov Alexey Gladkov [d83c9e] Update project requires
 configure.ac 2013-01-17 Alexey Gladkov Alexey Gladkov [f533cd] Version 1.2.5
 depcomp 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 install-sh 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 missing 2008-05-12 Alexey Gladkov Alexey Gladkov [ae11de] Initial commit
 osec.spec 2013-01-21 Alexey Gladkov Alexey Gladkov [1e4375] 1.2.5-alt2

Read Me

Osec is a lightweight integrity checking system.
You can use it to see difference between two states of your system
Osec also adds an ability of checking system for the dangerous files, e.g.
suid, sgid and world writeable

If you run osec under root acount, then this program
will work under non-privilegy user with only one extra capability 'dac_read_search', so osec cannot
damage any system file on internal errors.

Osec is divided into two parts:
1. osec          - data gathering program. Osec have made it's output in row format to stdout.
2. osec_reporter - report filter. You can pass row output from osec to reporter to see 
human-readable reports with some analisys.

Reporter process made it's output to stdout, so you can continue this pipeline. For example, you 
can send e-mail with report to system administrator.

If you develop some interesting reporter module or filter you can sent to authors to include
it into osec distribution.

Authors
-------
Written in C++ by Stanislav Ievlev <inger@altlinux.org>.
Almost completely rewritten from scratch in C by Alexey Gladkov <gladkov.alexey@gmail.com>.

Requires
--------
You need following tools to build library:
    o c compiler (gcc 3.2 or higher)
    o libcdb library (0.76 or higher). Latest version available at http://www.corpit.ru/mjt/tinycdb.html
    o libcap library (1.10 or higher)
    o GNU autoconf (2.61 or higher)
    o GNU automake (1.11 or higher)
    o GNU help2man (1.40.12 or higher)

optionally:
    o libattr library (2.4.46 or higher)

Notes
-----
You can use osec under non-privilege user, but if you try to run osec under administrator account,
osec will try to drop its privileges to non-privilege user "osec". You can change this default
user (and group) using --user (--group) options.
By default, osec will create database in current directory. You can change this path using
--dbpath option. If you run osec under administrator account please check that non privilege user
have write osec in this output directory.


Bug reporting
------------
Please report all bugs you find in the program directly to authors.
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.