Osec

Osec is a great lightweight integrity checking system that is perfect for those who want to ensure the safety of their system. With Osec, you can quickly and easily see the difference between two states of your system. Moreover, it has an additional ability to check your system for dangerous files, such as suid, sgid, and world-writable files.

The best part about Osec is that you can safely run the program under a non-privileged user account without having to worry about it causing any damage to your system. If you run Osec under root account, it will work under a non-privileged user with only one extra capability - "dac_read_search".

Osec is divided into two parts, Osec itself is a data gathering program that generates output in a row format to standard output. The other part is the Osec reporter, which acts as a report filter. You can pass the row output from Osec to the reporter and get more human-readable reports that come with a bit of analysis.

The best part about the Osec reporter is that it can print results to standard output, making it easy to continue the pipeline. For instance, you can send an email with the report to your system administrator to get more insight and take action if necessary. Osec is ideal for systems that demand data integrity, where data compliance or regulatory requirements are expected.