etcsecurity

/etc/security

The /etc/security file is a straightforward shell script run each day for /etc/daily. It performs a variety of very simple system security and integrity checks. It does not solve any security problems, but it may make you aware of them. The complete list of checks performed by /etc/security grows from one release to the next, but here are some of the biggies:

• Check /etc/master.passwd for suspicious entries.

• Check root's environment for suspicious entries.

• Check ownership on vital system files, disks, file systems, and important user files.

• Check for content changes in files listed in /etc/changelist.

If nothing has changed, the output from this program is extremely short. If something has changed, you really will wish you had been reading your daily security reports.