NAME

       checksecurity - Run a collection of simple system checks

SYNOPSIS

       checksecurity

DESCRIPTION

       The  checksecurity  command  runs  a  small  collection  of simple system checks which are
       designed to catch a few common security issues.  checksecurity is run by cron in  a  daily
       basis.

CONFIGURATION

       The   checksecurity.conf   file   defines   several   configuration   variables:   MAILTO,
       CHECK_DISKFREE, CHECK_PASSWD and CHECK_SETUID LOGDIR.  Each is described below.

       The checksecurity program works  with  a  collection  of  plugins  which  are  located  in
       /usr/share/checksecurity and are configured individually by their own configuration file.

       CHECK_PASSWD  If  this  is set to TRUE then the check-passwd script will be invoked.  This
       script is designed to report upon system accounts which have no passwords.  CHECK_DISKFREE
       If  this  is  set to TRUE then the check-diskfree script will be invoked and will allow an
       alert to be sent if there is any  mounted  partition  is  running  short  on  disk  space.
       CHECK_SETUID  If  this  is  set to TRUE then the check-setuid script will be invoked, this
       will compare the setuid binaries upon the system to those that existed previously and show
       the differences.

FILES

       /etc/checksecurity.conf
              checksecurity configuration file

SEE-ALSO

       See also check-diskfree(8), check-setuid(8), check-passwd(8) and check-iptables-logs(8)