/etc/fcheck/fcheck.cfg is in fcheck 2.7.59-17.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 | # FCheck.cfg (Sol)
#
# Directories to be monitored are shown below. Multiple entries may be used
# by using the following 'keyword=variable' format:
#
# [Directory=(path/name)]
# [Directory=(path/name)]
# ...
#
# If you want recursive direcotry monitoring, place a / at the end of
# the directory name, otherwise the script will interpret the entry as a
# single file or single directory to monitor.
#
# For example the entry "Directory=/usr"
# will watch everything in the /usr directory
#
# and the entry "Directory=/etc/passwd"
# will monitor only the password file.
#
# while the entry "Directory=/usr/"
# will watch everything in the /usr directory, and everything
# recursively under it, (I.E. /usr/bin..., /usr/local/..., etc.)
#
Directory = /
Directory = /etc/
Directory = /bin/
Directory = /sbin/
Directory = /lib/
Directory = /usr/bin/
Directory = /usr/sbin/
Directory = /usr/lib/
# Optionally may want to add the following:
#Directory = /usr/
#Directory = /usr/X11R6/bin
#Directory = /usr/X11R6/lib
#Directory = /var/
# WARNING
# Use the following exclusions with care,
# only include log files that are constantly undating and are known to
# be written to frequently otherwise you can defeat the purpose of fcheck
# by excluding too much...
#
# Specific files, and/or directories can be excluded.
#
# If used, configure them as full paths and their filenames. Directory
# names must have a "/" appended to the end of its filename in the exclude
# section.
#
Exclusion = /tmp/
Exclusion = /var/
Exclusion = /lib/udev/devices/
Exclusion = /run/
# Other common paths you may need to exclude
#Exclusion = /etc/mtab
#Exclusion = /etc/resolv.conf
#Exclusion = /etc/cups/cupsd.conf
#Exclusion = /etc/cups/cupsd.conf.O
#Exclusion = /etc/cups/printers.conf
#Exclusion = /etc/cups/printers.conf.O
#Exclusion = /etc/ld.so.cache
#Exclusion = /etc/network/run/ifstate
#Exclusion = /etc/adjtime
#Exclusion = /etc/motd
#Exclusion = /etc/default/ntpdate.dhcp
#Exclusion = /etc/ntp.conf.dhcp
#Exclusion = /etc/logcheck/
#Exclusion = /etc/.bzr/
#Exclusion = /etc/.git/
#Exclusion = /etc/.hg/
#Exclusion = /etc/.etckeeper
#Exclusion = /etc/.gitignore
# Miscellaneous settings are passed to fcheck from here.
#
# The "DataBase" keyword points to the absolute path/filename of the baseline
# database file, and is defined next.
#
DataBase = /var/lib/fcheck/fcheck.dbf
# If you are using a read-only location. You can write the database files to
# one location, and read from an alternate read-only (CD-ROM?) location.
#ReadDB = /usr/local/data/fcheck.dbf
#WriteDB = /usr/local/data/fcheck.dbf
# Your systems interface for passing messages to its log files, UNIX systems
# are typically found as "/usr/bin/logger".
#
# You could also send messages directly to a line printer if desired.
#
# Win32 platforms are forced to use line printers for now until a error
# logging module is created for NT platforms.
#
#Logger = /usr/bin/lpr
#
# As of version 2.7.50, you pass logger taglines (-t) options through here.
# Any other options can now be passed to third party loggers, scripts, etc.
Logger = /usr/bin/logger -tfcheck
#AuthLogger = /usr/bin/logger -tfcheck -pauth.info
#AuthLogger = /usr/bin/logger -tfcheck -pauth.notice
# This is the system command to determine a files type. Used to determine
# pipes, major/minor numbers.
#
# Only useful on Unix platforms, not portable to Windows (yet?!?!).
FileTyper = /usr/bin/file
# You may optionally set your hostname from the configuration file if FCheck
# is unable to determine it on its own.
#
#HostName = "Mikes"
# You may optionally set the system type from the configuration file if
# FCheck is unable to determine it on its own.
# Currently the only accepted option her is "System = DOS", otherwise FCheck
# will default to a UNIX system.
#
#System = Dos
# This must be set only for readability by you. It in no way effects the scan
# function of FCheck. It only changes what is presented to the end user, so
# the times that are presented to you may not be accurate if not set.
TimeZone = GMT
# This is used only if you require/desire a hash signature to also be generated
# for each file by use of the '-s' flag. If you do not use the (s)ignature
# flag, then the following variable setting will not impact fcheck in any way.
#$Signature = /usr/bin/sum
#$Signature = /usr/bin/cksum
#$Signature = /usr/bin/md5sum
$Signature = /usr/bin/sha256sum
# Include an optional configuration file.
# [CFInclude = (path/config_file_name)]
#CFInclude
# Used for individual file checking (I.E. FCheck databases!)
File = /var/lib/fcheck/fcheck.dbf
# Used for local settings
CFInclude = /etc/fcheck/fcheck.local.cfg
#
# End of FCheck.cfg file
#
|