sa-secure-audit-debsums

Example of use: check box-example

Simple:

     - {
         role: "sa-secure-audit-debsums"
       }

Advanced:

     - {
         role: "sa-secure-audit-debsums"
       }

Verify every installed package including configuration files.

sudo debsums -a

Verify installed packages and report only errors

sudo debsums -s

Verify every installed package and report only changed files.

sudo debsums -c

Verify every installed package including configuration files and report only changed files.

sudo debsums -ca

Verify every installed package and report only changed configuration files.

sudo debsums -ce

Verify specific package and its configuration files.

sudo debsums -a bash

Get a list of packages with missing or modified file.

dpkg-query -S $(sudo debsums -c 2>&1 | sed -e "s/.*file \(.*\) (.*/\1/g") | cut -d: -f1 | sort -u

Use generated list to reinstall group of packages.

sudo apt-get install --reinstall $(dpkg-query -S $(sudo debsums -c 2>&1 | sed -e "s/.*file \(.*\) (.*/\1/g") | cut -d: -f1 | sort -u)

Copyright and license

Code licensed under the BSD 3 clause or the MIT License.

Subscribe for roles updates at FB