What should go into a security-checking shell script?

[jim frost]

In article <1TDnkx#VBnsh=greg at cheers.UUCP> greg at cheers.uucp (Greg Onufer) writes:
|A few things to think about:
|	- Compare checksums of all vendor-supplied executables
|	  with known-correct checksums.

Actually it's better to do both a CRC and an inode-change test; the
latter is very fast and fairly difficult to get around portably, the
former is kind of slow but tough to get around.  A combination of the
two is fairly effective.  This kind of test should be done on the
kernel regularly!

jim frost
software tool & die
madd at std.com