Integrit

Integrit is a software used for file integrity verification, providing a simpler alternative to programs like tripwire and aide. The software helps in identifying whether a computer system has been modified by an intruder or not. Without integrit, it is difficult for system administrators to understand if they are using tools that are Trojan horses or not when investigating a potential breach. For instance, if a machine has a "/tmp/. " directory containing a shell that's setuid root, how does one know that an attacker hasn't replaced the "find" and "ls" commands with tampered versions?

Integrit works by creating a database that is a snapshot of the essential parts of the computer system. This database is kept in a secure location and can be used later to ensure that no illicit modifications are made to the system. In the case of a security breach, integrit provides a report of modified or removed files, making it easier to identify the extent of a compromise. The software is robust, stable, and designed for professional use.

Integrit has many features that make it unique and useful. Its small memory footprint means it won't interfere with other important processes running on the system. The simple, modular design makes it easy to use while enabling open-source development. The software uses up-to-date cryptographic algorithms from gnupg and is designed for unattended use. The cascading rulesets for the configuration file are intuitive, and it has an option to reset access times of selected files or directory trees. The output format can be XML or an easy-to-scan human-readable format. The software allows for simultaneous check and update, and its distribution package contains auxiliary programs for convenience.


The latest release of the software fixes the exit status codes when finding "missing files," making it an even more dependable software. Overall, integrit is a powerful tool that can help keep computer systems secure and provide peace of mind to system administrators.