Checking for user files

Samhain
Prev | Appendix C. List of configuration file options | Next

# C.9. Checking for user files

Section heading:

[UserFiles]

Entries:

UserfilesActive=`boolean` — '1' to switch on, '0' to switch off.

UserfilesName=`filename policy` — Files to check for under each $HOME. Allowed values for 'policy' are: allignore, attributes, logfiles, loggrow, noignore (default), readonly, user0, user1, user2, user3, and user4.

UserfilesCheckUids=`uid list` — A list of UIDs where we want to check. The default is all. Ranges (e.g. 100-500) are allowed. If there is an open range (e.g. 1000-), it must be last in the list.

Prev | Home | Next
Checking for mount options | Up | Checking for hidden/fake/required processes