NAME
checksecurity - Run a collection of simple system checks
SYNOPSIS
checksecurity
DESCRIPTION
The
checksecurity
command runs a small collection of simple system checks which are designed
to catch a few common security issues.
checksecurity
is run by
cron
in a daily basis.
CONFIGURATION
The
checksecurity.conf
file defines several configuration variables:
R MAILTO,
R CHECK_DISKFREE ,
R CHECK_PASSWD
and
R CHECK_SETUID
R LOGDIR .
Each is described below.
The checksecurity program works with a collection of plugins which are
located in /usr/share/checksecurity and are configured individually by
their own configuration file.
CHECK_PASSWD
If this is set to
TRUE
then the check-passwd script will be invoked. This script is designed to
report upon system accounts which have no passwords.
CHECK_DISKFREE
If this is set to
TRUE
then the check-diskfree script will be invoked and will allow an alert
to be sent if there is any mounted partition is running short on disk
space.
CHECK_SETUID
If this is set to
TRUE
then the check-setuid script will be invoked, this will compare the
setuid binaries upon the system to those that existed previously and
show the differences.
FILES
/etc/checksecurity.conf
checksecurity configuration file
SEE-ALSO
