Table of Contents
- 1. How to invoke
- 2. Using daemontool (or similar utilities)
- 3. Controlling the daemon
- 4. Signals
- 5. PID file
- 6. Wait on file check
- 7. Log file rotation
- 8. Updating the file signature database
- 9. Improving the signal-to-noise ratio
- 10. Runtime options: command-line & configuration file
- 11. Remarks on the dnmalloc allocator
- 12. Support / Bugs / Problems
From the command line
samhain -t init [more options] — To initialize the database
samhain -t check [more options] — To check against the database
By default, samhain will not become a daemon, but stay in the foreground. Daemon mode must be set in the configuration file or on the command line. Also by default, samhain will neither initialize its file system database nor check the file system against it. The desired mode must be set in the configuration file or on the command line. A complete list of command line options is given in the appendix.
To start as daemon during the boot sequence
For Linux (Debian, Redhat, Gentoo, and SuSE), *BSD, Solaris, HP-UX, AIX, IRIX make install-boot will setup your system for starting the daemon upon system boot (if the correct OS/distribution cannot be determined, nothing will be done).
For any other system, you need to figure out by yourself how to start samhain during the boot sequence.