_O_n_l_i_n_e _M_a_n_u_a_l System Manager Commands comply(8) NNNNAAAAMMMMEEEE /usr/pkg/comply - check files against software bill of materials SSSSYYYYNNNNTTTTAAAAXXXX ccccoooommmmppppllllyyyy [ ----ffffsssseeeeddddbbbbcccc ] [ ----FFFF mmmmttttooooggggppppssssllll ] [ ----kkkk_n ] [ ----tttt_t_i_m_e ] [ ----pppp passwdfile ] [ ----gggg groupfile ] bomfile ... DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN _c_o_m_p_l_y is used to check a directory tree against a ``software bill of materials''. The bill of materials speci- fies a directory tree, including directory and file names, modes, owners, groups, link counts, and link associations. All instances where the contents of the actual tree do not match the tree specified in the bill of materials are reported. To a limited extent, _c_o_m_p_l_y will also fix up instances where the directory tree is found to be out of compliance with the bill of materials. _c_o_m_p_l_y should be executed in the root directory of the tree to be checked. Files in a bill of materials file (_b_o_m_f_i_l_e) are named relative to this directory. For example, a file named usr/bin/file in a _b_o_m_f_i_l_e is checked against the file ``./usr/bin/file''. The ----ffff option is used to enable fix mode. In fix mode, _c_o_m_- _p_l_y will attempt to impose compliance with respect to file ownership, group, and permissions, including set user and group id bits. If links (symbolic or hard) specified in the _b_o_m_f_i_l_e are missing or incorrect, they will be created or fixed. If directories specified in the _b_o_m_f_i_l_e are missing, they will be created. For directories to be created, all directories in the pathname preceding the named directory must already exist. To insure this condition, it is highly recommended that each _b_o_m_f_i_l_e contain entries for every directory mentioned in that _b_o_m_f_i_l_e. For example, if the file /usr/foo/foofile is mentioned in a bom, then entries for the directories /usr and /usr/foo (in that order) should precede the entry for /usr/foo/foofile. Currently, no other fixes are attempted. Only the super-user may run _c_o_m_p_l_y in fix mode. Without ----ffff, comply will only report files or directories found to be out of compliance. The ----FFFF option allows individual kinds of fixes to be enabled (as opposed to ----ffff which enables all of the fixes explained above.) ----FFFF is followed by one or more of the following key letters, each of which, if present, enables one type of fix: m create missing entries (directory, symbolic link, or hard link) t correct files which exist, but are not of the correct type (when the file should be directory, symbolic link, or hard link, but isn't) o correct file ownerships g correct file groups p correct file permissions s correct symbolic links l correct hard links The ----ssss option causes _c_o_m_p_l_y to run silently; in fix mode, fixes will be attempted, but no messages will be produced when files or directories are found to be out of compliance. With the ----eeee (extra files) option, _c_o_m_p_l_y writes a list of pathnames of files present in the tree being checked, but absent in the bill of material file(s). If the ----dddd option is also specified along with ----eeee, an attempt will be made to remove such files from the tree being checked. Only the super-user may run _c_o_m_p_l_y with ----dddd. The ----cccc option causes _c_o_m_p_l_y to calculate checksums and com- pare them with the checksums in the _b_o_m_f_i_l_e; files whose checksum has changed are reported. If only the list of extra files is desired, and the ----dddd option is not required, the script /usr/pkg/extra can be run directly. It takes as arguments the root directory of the tree to be checked and a list of _b_o_m_f_i_l_es, and produces a newline-separated list of extra files on its standard out- put. The ----kkkk_n option sets an error threshold. _c_o_m_p_l_y will ter- minate when _n errors have been detected in fix mode; an _n of 0 means ``no limit'' (the default). Optional white space may separate the ``-k'' and _n. The ----tttt_t_i_m_e option causes _c_o_m_p_l_y to set the modification times of all files to a specific time and date. The _t_i_m_e is given as the number of seconds since midnight January 1, 1970 GMT. Optional white space may separate the ``-t'' and _t_i_m_e. When the ----bbbb option is present, _c_o_m_p_l_y will read the _b_o_m_f_i_l_e(s), checking for correct syntax, but will not not check the files specified. This can be used to find badly formed _b_o_m_f_i_l_e records before a ``real'' run of comply is performed. The _b_o_m_f_i_l_es contain the bills of material. The format of these files is described in bom(5). If the ----pppp flag is present, the file named is a password file to use instead of /etc/passwd. The ----gggg flag allows a group file to be specified in place of /etc/group. _c_o_m_p_l_y returns an exit status of 0 if complete conformance was achieved, nonzero otherwise. FFFFIIIILLLLEEEESSSS /etc/passwd to get user id's /etc/group to get group id's /usr/pkg/extra to detect extra files if ----eeee is specified. SSSSEEEEEEEE AAAALLLLSSSSOOOO File Formats(5): bom April 1990 TX System Manager's Reference