Afick

Jarom · 5 Sierpień 2017

Afick (Another File Integrity ChecKer) 3.5.3

Afick to narzędzie bezpieczeństwa które pozwala monitorować zmiany w systemach plików, a tym samym wykryć włamania.

Afick na razie został przetestowany z:

Windows XP, 2000, Vista, Seven with
Zaloguj lub Zarejestruj się aby zobaczyć!
linux Redhat (7.1, 7.3)
linux Fedora core (6 to 24)
linux Mandrake/Mandriva (8.2 to 2011.0)
linux Mageia (2 to 6 )
linux Suse Enterprise server 8.0, OpenSuse 11.x
linux Debian (Woody to Jessie, Knoopix)
linux Ubuntu (6.04 to 16.04)
linux Slackware (9.1)
HP Tru64 Unix 5.1B
HPUX 11
AIX 5.2.0

2015-07-03 Eric Gerbier <gerbier@users.sourceforge.net>3.5.3

bug fix

bugfix, allow arobase in filenames

improvements

Afick::Backend remove global Hashfile, move open_database/close_database

new features

incompatibilities

internal

use afick's constants for config grammar

add Afick::Report lib

add Afick::Learn lib

others

2016-08-05 Eric Gerbier <gerbier@users.sourceforge.net> 3.5.2

bug fix

fix a bug with exclure_re on pattern with space character

default backend now to Storable to fix SDBM problems

(afick_learn) bugfix on gid

(afick_learn) bugfix on empty rule

improvements

(windows) fix perl warnings on activeperl 5.20 about S_ISLNK

fix perl warnings about regex syntax

add Afick's modules in auto-control

improve doc about exclude_* directives (syntax, multi-lines)

improve linux.conf

new features

add new libs Afick::Backend Afick::Control

add report_context directive, to show all changed attributes

incompatibilities

the default ouput is like before 3.4.3 release : only display changed attributes from rules (except if you are using report_context)

on each run you may have this warning : "(test_dbm) a better dbm is available : Storable". To remove the warning, you have to run afick in init mode, to change the database backend.

internal

(Lock.pm) add basename method

back to old print/close syntax for compatibility with old perl

others

fix bad dates in specfile (changelog section)

2015-12-04 Eric Gerbier <gerbier@users.sourceforge.net>3.5.1

new features

new Afick::Log class to analyse afick's logs

new afick_learn.pl tool (using Afick::Log)

new afick_format.pl tool (using Afick::Log)

improvements

change perl shebang for more generic, using env

change window's installer from old setup2go to modern inno setup

incompatibilities

tgz install will now be under /opt/afick, no more merged into system

others

(windows) only use cmd files (no more bat)

some recode using modern perl syntaxe

2015-05-13 Eric Gerbier <gerbier@users.sourceforge.net> 3.5.0

use new class Afick::Cfg

new directive report_summary

(afick_format) bugfix, skip WARNING lines to detect first real line

(afick_format) add run,config metadata on xml output

2015-01-09 Eric Gerbier <gerbier@users.sourceforge.net> 3.4.3
this release was built to fix the 2 following problems :

changing attributes in a rule should not change the afick's report (files are not changed)

some attributes (inode/mtime) are not meaningfull to detect a file change, but are interesting for analysis

So the code was changed :

until 3.4.2 : only required attributes are stored in the database

from 3.4.3 : store all attributes in database and use required attributes (inode, file_size, checksum ...) to detect file changes

all changes :

bugfix

(afick) fix sparse error Odd number of elements in anonymous hash

improvements

better file change detection (less false positives)

incompatibilities

(linux, windows) remove inode, mtime from default rules (dummy change detection)

plugins output may also change, because they can access many more data

others

(afick) rename all same variables with same name ra_toscan

(afick) add internal doc

(afick) clean code, remove dead code (test_dbm_available, make_regex)

(afick) rename update sub into update_database

(afick) remove Nbmod global variable

(control) control sub also use is_changed

2014-12-12 Eric Gerbier <gerbier@users.sourceforge.net> 3.4.2

bugfix

(Gen) fix some others problem from windows tests in to_abspath

improvements

(packages) remove /etc/cron.daily from rpm package (avoid rpm warnings)

(afick) backport from 3.5 , stop parcours sub as soon as possible ( exceptions and already seen files)

(afick) backport from 3.5 : detect temporary files

(afick) recode exclude tests , a control file may be an exception

(windows) remove log directories from scan

(linux) update linux.conf to remove dummy changes

(control) auto_control_check gets files to check from Control hash

(control) also apply file normalisation on control files

(control) avoid duplicated scan of control files

new features

(packages) move html doc in new afick-doc package (rpm, deb)

(control) add history and archive (directives) in control files

incompatibilities

exclude filters only apply on files, not on directories

others

(afick) rename create sub into create_database

(Gen) new remove_trailing_slash sub

(afick) backport from 3.5 : use new top_parcours sub

(afick) code cleaning, recode the scanning tree engine (parcours)

2014-11-21 Eric Gerbier <gerbier@users.sourceforge.net> 3.4.1

bugfix

(Aliases) fix warning if empty masq in _decode_alias_unit

(Gen) fix bug in to_abspath for windows env

(windows) fix bug dummy file changes : sort windows acl

(windows) remove acl if too long to avoid SDBM error

improvements

(windows) add 32 bits applications directory to scan in windows.conf

(windows) remove winsxs from scan in windows.conf

(Tst) avoid code redondancy in _is_fileval

(Directives) add is_initialized method to detect overload

standardize directory separator (reg_name) after environment replacement in read_configuration sub

in read_configuration, in debug mode, display also expanded rule line

(Msg) add showstack method to help debug

2013-08-23 Eric Gerbier <gerbier@users.sourceforge.net> 3.4

use new classes Afick::Aliases, Afick::Macros, Afick:irectives

new macro : archive_retention

(windows) force install of Tk module (for activeperl)

improve afickonfig : work on all config types

add regression tests

fix inconsitence between command line parameters and config directives

bugfixes

2012-12-21 Eric Gerbier <gerbier@users.sourceforge.net> 3.3

use class Afick::Gen

fix bug on report_url option

fix bug on check_update

change code to avoid global variables

2012-07-19 Eric Gerbier <gerbier@users.sourceforge.net> 3.2

match 2.22 for features

windows : move database files to database directory

add stat_date plugin

use Afick::Tst

fix bug on progress option

fix bug on print_config

fix warning on unlock

fix warning on config file (path)

fix : only display dangling links if dead_symlinks is set

fix quiet option

fix report_syslog option

fix aficonfig delete config var

afickonfig : add list option

afickonfig : can print_config without any writable perm

2012-07-19 Eric Gerbier <gerbier@users.sourceforge.net> 2.22

clean pod syntax

allow rpmbuild -tb on tgz, clean makefiles

windows : move database files to database directory

add stat_date plugin

2012-07-20 Eric Gerbier <gerbier@users.sourceforge.net> 3.1

first object version of afick, matching in feature the 2.21

2012-07-13 Eric Gerbier <gerbier@users.sourceforge.net> 2.21

add nagios nsca option in afick_cron

2012-02-05 Eric Gerbier <gerbier@users.sourceforge.net> 2.20

add sha-256, sha-512 checksum (to be used instead sha-1)

(bugfix) print command display sha checksum in same format as sha1sum/... command

2011-11-10 Eric Gerbier <gerbier@users.sourceforge.net> 2.19

(afick.spec) add compatibility with old rpm digest format

add csv option (export database in csv format)

add MAILAUTH macro for mail auth (windows)

add relative_path directive

can use chroot directories using AFICK_CHROOT

begin to merge get_configuration and read_configuration

2011-10-05 Eric Gerbier <gerbier@users.sourceforge.net> 2.18

rename calc_control into auto_control_check

add auto_control_prepare sub

rename get_names into get_script_list

add get_database_list

rename add_database_control into auto_control_prepdb

check also database in auto-control_check

try to compute checksum without NOATIME

add is_special_dir sub

environment variables in config file are expanded on fly at begin of run

config pod doc match config sample sections names

(windows) fix a bug : alias are case-sensitive

(windows) fix afick_set_planning bug, use absolute path to afick_planning

(windows) fix a bug in stat_secu : getpwent does not work on windows

(windows) fix a bug in afick_planning.pl about commented macros (mail)

(windows) add a delete button in afick_set_planning.pl

(windows) fix junction directories warning (can not open directory in parcours)

2011-06-08 Eric Gerbier <gerbier@users.sourceforge.net> 2.17

separator for arguments in --list option is now comma instead space (bug reported by Margaret Garland)

arguments for --list can also be given in several calls

common version with afick-tk

search for default config file is now the same for unix and linux : /etc/afick.conf then afick.conf

2010-12-10 Eric Gerbier <gerbier@users.sourceforge.net> 2.16-1

fix bug in print_digest (bug report from Andy Bach )

fix bug base_checksum / degraded mode

rename set_planning.pl into afick_set_planning.pl

2010-04-06 Eric Gerbier <gerbier@users.sourceforge.net> 2.15-1

add 64 bits lib directories in afick.conf and afickonfig.pl

(afickonfig.pl) addlib also add libs from ldd command on perl binary

(afick_cron) now use sh syntax instead bash syntax (patch from Mike Muise)

(afick) avoid loosing time in print_digest in null (patch from Mike Muise)

(afick_cron) fix hostname call for non GNU unix (patch from Mike Muise)

fix english typo (suggest from Francis Favorini)

(afick) fix error with activeperl 5.10.1.1007 on S_ISBLK (bug request from Francis Favorini)

check_config warns about environment variables in config file

clean_config try to replace environment variables in config file

(afick) allow to work as admin on vista/seven (uac)

2009-07-24 Eric Gerbier <gerbier@users.sourceforge.net> 2.14-1

only one dangling info report

output compatibility with md5sum/sha1sum commands

fix a bug on negative rule

add quiet option, not recommanded (feature request from Kevin Crowston)

2009-01-16 Eric Gerbier <gerbier@users.sourceforge.net> 2.13-1

(unix) remove udev files from scan

begin to remove global variables (Id, Field)

reference date is now $BASETIME

move to_abspath to afick-common

recode messaging to use same low-level subs (report)

add LF in report sub

new crlf sub

detect date in the future (Running)

new directive/option : only_suffix

new analysis option stat_ext

print dangling file as info if warn_dead_symlinks is disabled

test for existing database and die if not

2008-10-16 Eric Gerbier <gerbier@users.sourceforge.net> 2.12-1

(windows) afick_planning now send report instead summary and use LINES macro

(unix) fix a warning with perl 5.10 on Constant subroutine main::S_IWGRP redefined

fix perlcritic warnings

(unix) new MOUNT macro to use a remote database when using batch task on unix (afick_cron)

add a security to avoid exlude auto-control files

better Makefile.pl diagnostics (I hope)

(unix) remove udev files from scan

2008-04-10 Eric Gerbier <gerbier@users.sourceforge.net> 2.11-1

afick_planning can also send a mail on windows (add MAILHOST macro)

only one doc source : the included pod doc

2007-05-17 Eric Gerbier <gerbier@users.sourceforge.net> 2.10-1

post_install can replace environment variables in afick's config

windows config file now use environment variables (Manuel Martin suggest)

rename set_planning.bat to afick_postinstall.bat

display warning for too long acl on windows (SDBM error)

add report_syslog directive and option

dynamic choice of database backend (on init)

change directives compare algorithm (diff_tab sub)

remove usage sub (all doc in pod)

add report_url option

adapt afick_cron to old shell syntax (ash ...) to fix bug with anacron ( Slass100 report)

prepare code for daemon mode (with gamin use)

checksum do not change atime any more if possible

improved afick change detection (warnings not only on checksum)

2006-10-05 Eric Gerbier <gerbier@users.sourceforge.net> 2.9-1

fix bug on temporary files (init parameters to 0) ? (afick)

fix bug for exclude* (multi-line works again, was broken in 2.7-1) (afick-common), thanks Manuel Martin

use more constants (afick)

skip checksum on empty files (afick)

recode addfile in checksum sub to avoid exit (croak) on errors (afick)

change warning to debug for checksum access on windows (afick)

updated windows config file (add exclude by Manuel Martin)

(afickonfig) add man option (first use of Pod::Usage)

(afickonfig) add opt_ prefix for opt variables

(afickonfig) for addpath option on windows, add %systemroot% and %ProgramFiles%

(afick) fix a bug on exceptions with globing and ignore_case

2006-09-04 Eric Gerbier <gerbier@users.sourceforge.net> 2.9-0

add database files in rpm database (ghost)

new warning_def and debug_def default subroutines (afick-common) to avoid duplicate code

new option --check_update to check for a new version (afick)

use perlcritic to clean perl code (follow Conway rules)

rename planning.bat to set_planning.bat and planning.pl to set_planning.pl (windows)

fix tar.gz install for hpux users (thanks Menguy Jacques)

fix a bug on print_config option (afick)

add afick_archive.pl tool

info, debug, warning now have an internal new line terminator

tar.gz, debian and rpm install now use common scripts for pre-install and post-install (clean config configuration)

improved configuration upgrade with "local config section"

clean_config do not remove comments any more (afick/afickonfig bugfix)

running an update action on a missing database switch to init action (useful for batch job)

change allow_overload default directive value to yes

addpath and addlib option now work on Microsoft OS (afickonfig bugfix)

move html doc to html subdirectory

2006-04-14 Eric Gerbier <gerbier@users.sourceforge.net> 2.8-3

new my_die sub to be consistent (as warning, info ...)

add a locking mechanism on database (my_lock, my_unlock, close_database sub)

add new debugging tool ( debug_begin, debug_end, get_caller )

add signal trapping for a clean exit

fix bug if macro VERBOSE = 1( no mail sent if no changes) on afick_cron

nice macro value is used by afick.pl

change auto_control check for rfc needs

fix a bug with follow_symlinks doc which does not match behavior

new windows packager Setup2Go

(windows package) save config file before install

(windows package) remove task from service planning on uninstall

(windows package) remove hard-coded path to afick directory

2005-08-17 Eric Gerbier <gerbier@users.sourceforge.net> 2.8-2

default config file can be set in AFICK_CONFIG environment variable

bugfix : afick can be started again by not-root users

rename afick.cron into afick_cron (cron file name limitation on Debian)(thanks to Roland Kruggel)

2005-06-28 Eric Gerbier <gerbier@users.sourceforge.net> 2.8-1

fix date on control file to match history/archive date

more general addrule sub

improve auto-control on directives changes

fix bad directives display, with a new uniq sub (get_list_dir)

add a warning if init action on an existing database

package for Debian sarge

2005-06-06 Eric Gerbier <gerbier@users.sourceforge.net> 2.8-0

restrict permissions on database files

now add all afick's programs to database

allow md5 and sha1 checksum

stat_secu : add uid and gid orphans

doc translation to french

Makefile.pl can change shebang (perl path) on perl scripts (suggest from paulhargreaves)

upgrade from tar.gz now save old config file

2005-05-01 Eric Gerbier <gerbier@users.sourceforge.net> 2.7.1

fix problem with mkdir (add -p) on src.rpm (thanks Sinner)

add real elapsed time in timing option for afick.pl (thanks Roland Friedwagner)

remove symbolic links from running testing (thanks Roland Friedwagner)

fix problem with tar.gz install (afickonfig return code)

fix bug on get_configuration sub for multi-line exclude

add follow_symlinks directive to have control checksum behavior on symbolic links(Roland Friedwagner)

fix bug with root dir on windows (thanks Jean-Marc Mongrelet)

add macro REPORT

add directive allow_overload

fix bug for exceptions and quoted files

2005-02-09 Eric Gerbier <gerbier@users.sourceforge.net> 2.7.0

add print_directive, print_macro, print_alias, print_rule options

add addpath and addlib options to afickonfig command

get macro constant from Fcntl instead POSIX (define socket and links)

add search option to get a filtered output from database

add stat_secu and stat_size options

add tab2hash, get_filemode, get_filesize, is_type, split_record sub

add open_database, statistics sub

move rech_parent sub to afick-common

run afickonfig.pl --addpath --addlib in rpm and tgz install

change default max_checksum_size to ~ 10 Mo

fix test_os.sh script perms bug

better section split in config file

use same format for all printed dates (last run ...)

add uninstall target in Makefile for tar.gz installers

allow new fileinfo fields (add norm_info and is_changed sub)

2005-01-13 Eric Gerbier <gerbier@users.sourceforge.net> 2.6.2

fix a bug on afickonfig with directives

avoid scan if list mode contains exceptions (rech_parent)

open database in read-only mode if compare (bug report from Brian Warshawsky)

do not write control file in compare mode

2005-01-06 Eric Gerbier <gerbier@users.sourceforge.net> 2.6.1

now create history file, archive Dir if not exists

on window, launch icon is now in afick menu

add a warning if nothing to scan

debug and clean list options treatment : check for adequate rule and warn if not exist

2004-12-17 Eric Gerbier <gerbier@users.sourceforge.net> 2.6.0

restrict config file perm (security)

add max_checksum_size directive for partial checksum on big files (idea from Emmanuel Florac)

add exclude_re directive for regular expressions filter

2004-11-12 Eric Gerbier <gerbier@users.sourceforge.net> 2.5.0

fix bug on print_config option

add alias, macros, rules options on afickonfig

check config validity at end of afickonfig

add info on check_config

now use common lib afick_common.pl

add option clean_config (afick.pl)

rewrite alias parsing ( now in good order)

fix bug in E alias use

2004-10-16 Eric Gerbier <gerbier@users.sourceforge.net> 2.4.0

change tar.gz installer (Makefile) to work on AIX (add test_os.sh)

add short option -A for --archive

clean rpm files with rpmlint

now check macro syntax (afick.pl)

fix bug in planning.pl (remove rem)

add afick_planning.pl to send MessageBox to user on windows from

planning

test if archive directories exists (afick.pl)

now can choice day/time for service planning (planning.pl)

change all dates from gmt to local time

print_config option now print macros/alias/rules too

add current version in report header

add exclude_prefix directive

rewrite exclude algorithm to be faster

2004-07-21 Eric Gerbier <gerbier@users.sourceforge.net> 2.3.1

on windows, the uninstall should work again

on linux, perl-Digest-MD5 (rpm) dependency was removed to work with perl 5.8. (a perl test is now done in pre-install stage

2004-06-30 Eric Gerbier <gerbier@users.sourceforge.net> 2.3.0

add afickonfig.pl tool to manage afick's config file

add --database/-D option

add comments on running options in output

add check_config option

rename scan.cmd into afick_scan.cmd

change print_config output to the same format as config file

test if exists before adding to service planning on windows

remove old 'h' attribute (replaced by md5, or sha1)

2004-05-08 Eric Gerbier <gerbier@users.sourceforge.net> 2.2.0

replace double quotes by simple if possible

add the NICE macro to control afick cron job priority (on a suggest from Bryan )

fix missing file name in print mode

bug on dangling links, defined as top file in config file ( bad $rep) (on a bug report from Bütow Michael)

add macro BATCH to allow cron remote control

2004-04-05 Eric Gerbier <gerbier@users.sourceforge.net> 2.1.0

reference to array in sub (on a suggest from Terry Gliedt)

new directive debug

add an eval on FileSecurity to avoid perl crash or warning (on a bug report from Scott Harlow)

remove perl -T flag to have same version on all os

a new Makefile.pl for tgz install (check dependencies) (on a suggest from Terry Gliedt)

fix a bug with --print and archive mode

add a planning.bat on windows to insert a task in planning (with the help from Andre DUCLOS)

2004-03-11 Eric Gerbier <gerbier@users.sourceforge.net> 2.0.0

add ignore_case directive/option

add history directive/option

add archive directive

bug in subtractive alias

remove/clean global var

split in 2 packages command-line and gui

add a makefile for tgz package

add macro VERBOSE to suppress useless mail if no changes

2004-01-28 Eric Gerbier <gerbier@users.sourceforge.net> 1.8.0

for new files, display inode date

for deleted files, display parent change date

output format change to allow automatic parsing (comments)

add all perl dependencies in package

resolv all name to absolute path

afick-tk, more homogeneous gui

afick-tk, add tree view

afick-tk, add balloon for context help

2004-01-17 Eric Gerbier <gerbier@users.sourceforge.net> 1.7.0

add a line to explain fields on print action

add html doc

add acl instead uid field on windows (Win32::Filesecurity)

now use POSIX macros for portability

afick-tk, add a little 'wizard'

afick-tk,now display file number and percent

add sha1 checksum

2004-01-01 Eric Gerbier <gerbier@users.sourceforge.net> 1.6-0

fix a bug on report_url (with null)

detect changes during scan

fix a bug on deleted directories if not report_full

add a new -t/timing flag to print cpu statistics

add a new -r/--running_files to warn about modified files during program run

2003-12-10 Eric Gerbier <gerbier@users.sourceforge.net> 1.5-0

add exclude_suffix directive

add progress option for afick-tk

new sub warning

add new warnings on bad config lines

fix a bug on alias resolution

afick-tk, add progress bar and file stat

afick-tk, add warning section, and update window

afick-tk, rewrite widget structure

afick-tk, new warning sub

afick-tk, change saved output to .log

afick-tk, rewrite help

2003-11-28 Eric Gerbier <gerbier@users.sourceforge.net> 1.4-1

a better control between afick and afick.pl calls

afick.cron, now test -x (leo west)

rewrite afick help and man page in a better way

2003-11-13 Eric Gerbier <gerbier@users.sourceforge.net> 1.4-0

add an auto-control to check afick changes

perl checking for sub arguments (prototypes)

afick-tk, version in title

change getopt for compatibility with old perl version

always get a hostname in cron job

the exit status now depends upon changes

2003-10-22 Eric Gerbier <gerbier@users.sourceforge.net> 1.3-1

fix a bug in compare mode

more debug informations

afick-tk, change checkbox to optionmenu to have 3 choices (keep, overload, negative overload)

2003-10-14 Eric Gerbier <gerbier@users.sourceforge.net> 1.3-0

add file type

sort results

add menu entries

add report_full_newdel directive

add ignore_missing_file directive

add WARNING word for all warning

add long options (gnu, posix)

default config file change according operating system

afick-tk, change cursor to clock during search

afick-tk, radio-buttons to configure options

afick-tk, fix bug in save config on windows

2003-10-02 Eric Gerbier <gerbier@users.sourceforge.net> 1.2-0

add report and debug subroutines to have more general use

add report_url directive (stdout, stderr, null)

now have summary and detailed output

test for directories for equal scan

automatic database init on first install

fix a bug on -l flag use

remove checksum on sockets

afick-tk , edit and save config file

afick-tk , report stderr too

afick-tk , clear output after each operation

afick-tk , output expand to fill window

2003-09-23 Eric Gerbier <gerbier@users.sourceforge.net> 1.1-0

fix bug for md5

add warn_dead_symlinks directive

fhs appliance (Debian)

distinguish dir and dir/ for =

add quit buttons in afick-tk

add about window in afick-tk

add manpage for afick-tk

add log file for cron jobs

add logrotate for log file

2003-09-17 Eric Gerbier <gerbier@users.sourceforge.net> 1.0.0

add a default config file is /etc/afick.conf

add database in config file (-b option is obsolete now)

add equals selection lines (directories to scan, without recurse)

add a beta tk interface : afick-tk.pl

add ctime (c) and block count (b) parameters

2003-08-13 Eric Gerbier <gerbier@users.sourceforge.net> 0.9.3

add aliases in config file with +- syntax

add configuration man page

2003-08-12 Eric Gerbier <gerbier@users.sourceforge.net> 0.9.2

display in a more human way (device, perm)

add configurable attribute in config file

2002-09-09 Eric Gerbier <gerbier@users.sourceforge.net> 0.9

first public version package

Więcej:

Zaloguj lub Zarejestruj się aby zobaczyć!

Afick

Jarom

Bardzo aktywny