# Comments start with a pound sign.
#
# Include the full path for inclusion. For example, to check all files
# in /usr/bin, add the line /usr/bin/*. To check a single
# file, add a line like /usr/bin/single_file.
#
# ========================================================================
# Check basic system files. These should not be changed at all unless the
# system is updated or patches are applied.
# ========================================================================
/usr/bin/*
/usr/lib/*
/sbin/*
/usr/sbin/*
# ========================================================================
# Check interesting stuff in /etc. These files are typically static, but
# may occassionally be changed, particularly during application changes.
# Add and alter as appropriate.
# ========================================================================
/etc/exports
/etc/hosts
/etc/hosts.equiv
/etc/inetd.conf
/etc/inittab
/etc/rc.d/rc
/etc/rc.d/rc.local
/etc/rc.d/rc.sysinit
/etc/rc.d/init.d/*
/etc/rc.d/rc0.d/*
/etc/rc.d/rc1.d/*
/etc/rc.d/rc2.d/*
/etc/rc.d/rc3.d/*
/etc/rc.d/rc4.d/*
/etc/rc.d/rc5.d/*
/etc/rc.d/rc6.d/*
# ========================================================================
# Check root's crontab.
# ========================================================================
/var/spool/cron/crontabs/root
# ========================================================================
# Add more below as appropriate.
# ========================================================================
/etc/profile
