RFC is a script-based tool designed to support System-Administrators, providing a Remote Filesystem Checker.
RFC (Remote Filesystem Checker) is a valuable set of scripts used by system administrators to simplify the management of filesystem security. This software helps to run a range of filesystem-checker tools, such as tripwire or aide, seamlessly from one “master-node” to several “slave-nodes” using ssh, scp, sudo, and a few other useful features.
One of RFC’s key features is its ability to create or update a FileSystem-Checker’s (FSC) database while executing FSC checks, creating definitive log reports. Additionally, RFC supports parallel execution, mass-checking, and mass-upgrading, allowing for a range of possibilities. The software runs non-interactively and communicates using scp/ssh for all connections. The port used for ssh/scp connections can be arbitrary and can be customized for each host.
RFC can send one email to the administrator(s), rotate logs, databases, and other files automatically. It also supports AFICK, AIDE, and INTEGRIT FileSystem-Checkers, allowing for a variety of checks. The software checks new user and group creation/removal, changes to UID, GID, or shell, group member changes or ID changes, SUID/SGID on a remote host, and ensures that the remote host is operational before running checks.
Finally, RFC can kill processes that take too long and has an arbitrary timeout value that can be set. This software requires bash on any (?) posix system, base utils such as chown, chmod, adduser, sed, grep, and others, a mail program (such as "mail"), nmap on the master-node, ssh/scp client & ssh-keygen on the master-node, ssh/scp server on the slave-nodes, and sudo on the slave-nodes.
In the latest release, RFC features a new function that replaces the “seq” command, which is not available on all systems. A fix for a small bug that caused a “cp: missing destination file” error has been implemented. A new function has been included to check whether a node is alive without the “nmap” requirement. Additionally, the software has included “/lib” in all default configuration files for the filesystem checkers (AFICK, AIDE, and INTEGRIT). The latest version of AFICK, version 2.8-2, is supported, and the documentation has been updated to reflect the latest changes.
Overall, RFC offers an effective and invaluable solution for system administrators looking to simplify their filesystem management with enhanced security control.
One of RFC’s key features is its ability to create or update a FileSystem-Checker’s (FSC) database while executing FSC checks, creating definitive log reports. Additionally, RFC supports parallel execution, mass-checking, and mass-upgrading, allowing for a range of possibilities. The software runs non-interactively and communicates using scp/ssh for all connections. The port used for ssh/scp connections can be arbitrary and can be customized for each host.
RFC can send one email to the administrator(s), rotate logs, databases, and other files automatically. It also supports AFICK, AIDE, and INTEGRIT FileSystem-Checkers, allowing for a variety of checks. The software checks new user and group creation/removal, changes to UID, GID, or shell, group member changes or ID changes, SUID/SGID on a remote host, and ensures that the remote host is operational before running checks.
Finally, RFC can kill processes that take too long and has an arbitrary timeout value that can be set. This software requires bash on any (?) posix system, base utils such as chown, chmod, adduser, sed, grep, and others, a mail program (such as "mail"), nmap on the master-node, ssh/scp client & ssh-keygen on the master-node, ssh/scp server on the slave-nodes, and sudo on the slave-nodes.
In the latest release, RFC features a new function that replaces the “seq” command, which is not available on all systems. A fix for a small bug that caused a “cp: missing destination file” error has been implemented. A new function has been included to check whether a node is alive without the “nmap” requirement. Additionally, the software has included “/lib” in all default configuration files for the filesystem checkers (AFICK, AIDE, and INTEGRIT). The latest version of AFICK, version 2.8-2, is supported, and the documentation has been updated to reflect the latest changes.
Overall, RFC offers an effective and invaluable solution for system administrators looking to simplify their filesystem management with enhanced security control.
What's New
Version 3.3.0: N/A