Ricepaper

As Linux becomes a more popular Operating System, it also become's more popular Crackers Target. Because it is more of a target nowdays, a system administrator needs tools to see if his system has been cracked or not.
Ricepaper is designed to show the administrator when things have changed. It is essentially a poor man's tripwire. It does not make your system more secure, but it does let you have more peace of mind when systems start getting hacked into.

FAQ

How Do I Install RicePaper?
- Simply install the RicePaper rpm.
How Do I Run RicePaper?
- It is run daily automatically.
  You can look at /etc/cron.d/run.ricepaper to see when it is run as well as the comand line is to run it by hand.
Why Is It Named RicePaper?
- Because if a person walks on ricepaper, they leave footprints. This is from the old kung-fu movies.
How Do I Configure RicePaper?
- There is a file /var/spool/ricepaper/ricepaper.conf
  Edit this file. All the options are already in there, with comments that should answer questions.
How Do I Eat A Grasshopper?
- Raw - Open your mouth, plop in the grasshopper, swallow
- Cooked - Fry grasshopper in a little butter, put between two crackers, enjoy
What Can Be Checked With RicePaper?
- You can check to see what rpm's are added and/or removed from your system.
- You can verify the rpm's that are installed. This is done by doing a rpm -V on the installed rpms.
Can More Than Root Get Notified?
- Yes.
  Simply edit the MAILLIST variable
Do Grasshoppers Taste Good?
- No
What Is The Latest Version?
- Look below at the release notes. The last one is the latest.
Have You Really Tasted A Grasshopper?
- No
Is there some way that I can skip verification of some RPM (such as dev)?
- Yes, edit the RPMEXCLUDE line in the ricepaper.conf file to not recieve reports about certain rpm's.
  Since this was asked more than anything, dev is not reported by default.
Can you please point me to the rpm?
- Yes
  ricepaper-1.9.8-2.i386.rpm

TO DO
Make a man page

Variables
DEBUG	Turn on debugging which states what is happening each step of the way
ARCHIVEDAY	What day of the month the logs and history is archived
LOGFILE	Where is the mail log file
DATAPATH	Where is the data placed
MAIL	What mail program is used note changing this could cause the mailling to fail on a syntax error
MAILLIST	Who to send mail to when a change has been detected.

Version Changes
Version 0.9.0	It Basically Works
Version 0.9.1	Initiallizing problem fixed Archiving Added
Version 0.9.2	Config File usage implemented
Version 0.9.4	Put in the option of doing just rpms or just verifications
Version 1.9.0	Rewrote RicePaper to work one rpm at a time
Version 1.9.4	Fixed the main bug that had been plaguing me from the beginning.
Version 1.9.8	Finished with the rpm exclusions, only need final debugging and a man page