Fsic; Fsims - F-SECURE LINUX SECURITY Manual

fsic

You can create the baseline, add files to the baseline and verify the baseline with the fsic
command line tool.
1. To create the baseline, follow these instructions:
a) Run the fsic tool with the --baseline option: fsic --baseline
b) Enter a passphrase to create the signature.
A new baseline has been created.
2. To add files to the baseline, follow these instructions:
a) Run the fsic tool with the --add, --alert and --protect options:
/opt/f-secure/fsav/bin/fsic --add --alert=yes --protect=yes
/etc/passwd /etc/shadow
b) Recalculate the baseline. The baseline update progress is displayed during the process,
and you are prompted to select whether to include the new files in the baseline:
/opt/f-secure/fsav/bin/fsic --baseline
c) Enter a passphrase to create the signature.
In this example, the product is also configured to send an alert about unauthorized modification
attempts of the protected files.
3. To verify the baseline:
a) Run the command: /opt/f-secure/fsav/bin/fsic
b) Enter the passphrase that you used when you created the baseline.
The product validates files and displays whether the files are intact.

fsims

You can use fsims command to use the Software Installation Mode from the shell.
Follow these instructions to install new software:
1. Use the following command to enable Software Installation Mode:
/opt/f-secure/fsav/bin/fsims on
2. Install the new software.
3. Disable the Software Installation Mode to restore the normal protection level:
/opt/f-secure/fsav/bin/fsims off
F-Secure Linux Security | Command Line Tools | 81