As of version 2.5, the
beltane_update executable
has an option
UUID
which has the purpose to merge a Delta Database
(DeltaDB)
identified by the given UUID with the baseline database of a client:
root# beltane_update --mergeUUID
--update file.CLIENT
Location and naming | |
---|---|
The DeltaDB you want to merge must be named
file. |
This is part of a set of new features (most of them in Samhain) to allow seamless integration of the Samhain/Beltane II file integrity monitoring suite into a change control process. The full set of features and the discussion of various use cases is dicussed here.
The intended use of this particular feature is that, upon executing a scheduled change on the client, a DeltaDB containing the changes would be created. This DeltaDB can then be transported out-of-band to the server to perform an update of the client baseline database. I.e. this feature allows to update the client baseline database even if the client does not report the changes.