[apache]
check file apache_bin with path /usr/local/apache/bin/httpd
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[qmail]
check file apache_bin with path /var/qmail/bin/qmail-inject
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[sshd]
check file apache_bin with path /usr/sbin/sshd
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[syslogd]
check file apache_bin with path /sbin/syslogd
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[cron]
check file apache_bin with path /usr/sbin/crond
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[xinetd]
check file apache_bin with path /usr/sbin/xinetd
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[mysql-g8]
check file apache_bin with path /u01/mysql/libexec/mysqld
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[mysql-allinone]
check file apache_bin with path /usr/local/mysql/libexec/mysqld
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[sendmail]
check process sendmail with pidfile /var/run/sendmail.pid
group mail
start program = "/etc/init.d/sendmail start"
stop program = "/etc/init.d/sendmail stop"
if failed port 25 protocol smtp then restart
# if 5 restarts within 5 cycles then timeout
depends on sendmail_bin
depends on sendmail_rc
check file sendmail_bin with path /usr/sbin/sendmail.sendmail
group mail
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
check file sendmail_rc with path /etc/init.d/sendmail
group mail
if failed checksum then alert
if failed permission 755 then alert
if failed uid root then alert
if failed gid root then alert
[proftpd]
check process proftpd with pidfile /var/run/proftpd.pid
start program = "/etc/init.d/proftpd start"
stop program = "/etc/init.d/proftpd stop"
if failed port 21 protocol ftp then restart
if 5 restarts within 5 cycles then timeout
コメント