find file changes

[Hermann Biller]

dear cfengine users:

here is a simple example to check files:

#################################################################
# cfengine version 2.0.a14
#
# cf.filemonitor
#
# cfengine script to monitor changes of given system configuration files
#
#################################################################


files:

AllMachines.FileMonitor::
   /etc/TIMEZONE checksum=md5
   /etc/aliases checksum=md5
   /etc/auto_master checksum=md5
   /etc/bootparams checksum=md5
   /etc/bootptab checksum=md5
   /etc/datemsk checksum=md5
... 80 other files

output:
testhost root etc/cfengine # cfagent -DFileMonitor
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /etc/hosts changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /etc/inet/hosts changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /apps/sysadmin/etc/cfengine/cf.main 
changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for /apps/sysadmin/etc/cfengine/cf.groups 
changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for 
/apps/sysadmin/etc/cfengine/cf.solaris changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
cf:testhost: SECURITY ALERT: Checksum for 
/apps/sysadmin/etc/cfengine/cf.filecheck changed!
cf:testhost: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

there are some open questions.

- contrary to the documentation (files:checksum) the checksum will 
  not be updated in the database.
  the same alert occurs also at the next run
- files which were deleted are not displayed
- files with changed permissions are not displayed

note: it would not be a nice solution if the ownership has be defined 
      for each and every file. some ideas?

regards, hermann