Files to check

Allowed section headings (see the Section called Monitoring policies in the chapter called Configuration — samhain, the file monitor> for more details) are:

[Attributes], [LogFiles], [GrowingLogFiles], [IgnoreAll], [IgnoreNone], [ReadOnly], [User0], [User1], and [Prelink]

Placing an entry under one of these headings will select the respective policy for that entry (see the Section called Monitoring policies in the chapter called Configuration — samhain, the file monitor>). Entries under the above section headings must be of the form:

dir=[optional numerical recursion depth]path

file=path