diff options
author | Timo Teräs <timo.teras@iki.fi> | 2023-04-10 20:33:24 +0300 |
---|---|---|
committer | Timo Teräs <timo.teras@iki.fi> | 2023-04-11 20:55:13 +0300 |
commit | 67c0583a5e18c27880e2785536be3e66ff1c4bdd (patch) | |
tree | ead75e2bb978646cc87184137f85f55470477d51 /doc | |
parent | f514cfe6aa8b50c60c61e3f23ec3ac174661fd6b (diff) | |
download | apk-tools-67c0583a5e18c27880e2785536be3e66ff1c4bdd.tar.gz apk-tools-67c0583a5e18c27880e2785536be3e66ff1c4bdd.tar.bz2 apk-tools-67c0583a5e18c27880e2785536be3e66ff1c4bdd.tar.xz apk-tools-67c0583a5e18c27880e2785536be3e66ff1c4bdd.zip |
audit: implement detail records
Diffstat (limited to 'doc')
-rw-r--r-- | doc/apk-audit.8.scd | 21 |
1 files changed, 14 insertions, 7 deletions
diff --git a/doc/apk-audit.8.scd b/doc/apk-audit.8.scd index 70bd667..52e8733 100644 --- a/doc/apk-audit.8.scd +++ b/doc/apk-audit.8.scd @@ -13,17 +13,21 @@ apk audit - audit directories for changes *apk audit* audits the system or specified directories for changes compared to the package database. -The audit can be done against configuration files only (--backup) to generate +The audit can be done against configuration files only (*--backup*) to generate list of files needed to be stored in the overlay in run-from-tmps configuration. -Alternatively, it can audit all installed files (--system or --full) to +Alternatively, it can audit all installed files (*--system* or *--full*) to e.g. detect unauthorized modifications of system files. By default, the output format is one file per line, for each modified file. -A character is printed indicating the change detected, followed by a space, -then the affected path. The changes detected are: - -|[ A -:< File added +A character is printed indicating the line type, followed by a space, +then the affected path or details. The changes detected are: + +|[ - +:< Database detail record +| \+ +: On-disk detail record +| A +: File added | d : Directory added | D @@ -51,6 +55,9 @@ then the affected path. The changes detected are: Check file permissions too. Namely, the uid, gid and file mode will be checked in addition to the file content. +*--details* + Enable reporting of detail records. + *--full* Audit all system files. Same as *--system*, but in addition reports all added directories and files. A built-in default override for |