Riley, a Perl-based software, is designed as a file integrity checker, similar to Tripwire. It helps to verify the integrity of files and detect any unauthorized changes.
Riley is an efficient file integrity checker that is programmed in Perl and bears similarities with the popular Tripwire tool. It works by setting a file known as ".riley" in the configuration directory every time you run 'riley -initialize'. Each description in the file contains the name of the file, type, size, owner, group, permissions, and the number of links. Additionally, if a file is a regular one, the 'MD5' checksum of the contents is also included in the description. The '.riley' file also bears an 'MD5' checksum of the file itself to prevent unauthorized tampering.
Using 'riley-examine' command, you can examine the current state of every file and compare it against the initial description created by running 'riley -initialize'. If there are any changes, it is recorded in the system log file, and you will get an email alert too. The tool can even detect the presence of new files and the disappearance of deleted ones. If you're extra cautious, you can use the 'riley-correct' instead of the examine option. Called correction mode, it reverts the ownership of changed files to what the description file says it should be. For new and suspicious files, it changes their ownership to 'nobody/nobody' and sets their permission to 0 to prevent tampering.
Should you wish to change the default ownership and group settings of 'nobody/nobody', you only need to edit the global variables ('$unpriv_u' and '$unpriv_g') to something else for more secure options. The latest release features various upgrades, such as code enhancement to handle dangling symlinks, improved print usage when the option "-help" given, cosmetic improvements, and code update to install the program to check for "chattr".
Overall, Riley through its various command options offers a reliable and robust solution to keep your files secure by ensuring their integrity remains consistent over time.
Using 'riley-examine' command, you can examine the current state of every file and compare it against the initial description created by running 'riley -initialize'. If there are any changes, it is recorded in the system log file, and you will get an email alert too. The tool can even detect the presence of new files and the disappearance of deleted ones. If you're extra cautious, you can use the 'riley-correct' instead of the examine option. Called correction mode, it reverts the ownership of changed files to what the description file says it should be. For new and suspicious files, it changes their ownership to 'nobody/nobody' and sets their permission to 0 to prevent tampering.
Should you wish to change the default ownership and group settings of 'nobody/nobody', you only need to edit the global variables ('$unpriv_u' and '$unpriv_g') to something else for more secure options. The latest release features various upgrades, such as code enhancement to handle dangling symlinks, improved print usage when the option "-help" given, cosmetic improvements, and code update to install the program to check for "chattr".
Overall, Riley through its various command options offers a reliable and robust solution to keep your files secure by ensuring their integrity remains consistent over time.
What's New
Version 0.5: N/A