THIS TUTORIAL MANUAL provides a friendly introduction to the FreeVeracity data integrity tool.

This Tutorial Manual is intended to provide friendly, practical advice on how to use FreeVeracity. To get started as quickly as possible, work through the Getting Started Section. Once you've done that, browse the Applications Section for specific hints on how to use FreeVeracity in the application you have in mind. Then, if you want to explore FreeVeracity in depth, take a look at the later sections on specific topics. To perform a keyword search, click on SEARCH in the margin.

Note: Although this Tutorial Manual provides a sound introduction to FreeVeracity, it does not yet contain information on FreeVeracity's new client/server network functionality. For information on networking, see the Server chapter of the FreeVeracity Reference Manual .

Warning: This Tutorial Manual is provided as informal supplementary documentation only. For the definitive definition of FreeVeracity's behaviour, please refer to the FreeVeracity Reference Manual which is authoritative.

Disclaimer of liability: Rocksoft makes no express or implied representations or warranties in relation to this Software. To the full extent permitted by law, unless a specific contract is negotiated between Rocksoft and the user of this Software, Rocksoft will not be liable to the user under any law for any loss or damage (including but not limited to direct, indirect, economic and consequential loss or damage) in respect of any matter whatsoever related to the use of this Software, including without limitation, loss or damage caused by the negligent acts or omissions of Rocksoft or lost profits and damage suffered as a result of claims by any third person. Further, Rocksoft does not accept any responsibility or liability for any computer virus infection arising from the Software, or any loss or damage caused by the hardware or other software that is used in conjunction with the Software.

Warning: FreeVeracity is not licensed or available on commercial platforms. If you want to run FreeVeracity on a commercial platform, you should purchase a licence for the commercial Veracity data integrity product instead. FreeVeracity does, however, contain many commercial-platform-related features that allow it to use snapshots taken by Veracity on commercial platforms. This manual was generated from the Veracity Tutorial Manual and may contain sentences that imply that FreeVeracity is available for commercial platforms. These are incorrect. Please email the FreeVeracity Webmaster if you find one. Thank you.

Note: This product contains software developed by Rocksoft Limited (www.rocksoft.com).

1 Getting Started

1.1 What Is FreeVeracity?
1.2 Installing FreeVeracity
1.3 A Five Minute Tutorial
1.4 FreeVeracity Files
1.5 Updating A Snapshot
1.6 File Locations
1.7 Comparing Two Trees
1.8 Comparing Two Snapshot Files
1.9 Using Predefined Clipfiles

2 Applications

2.1 Protection Of Data
2.2 Verification Of Backups
2.3 Verification Of Compression Layers
2.4 Verification Of Encryption Layers
2.5 Verification Of Defragmentation Tools
2.6 Verification Of Transfers
2.7 Monitoring Firewalls
2.8 Monitoring Webservers
2.9 Detecting Modifications By Intruders
2.10 Cleaning Up After Intruders
2.11 Honey Pots
2.12 Detection Of Damage By Viruses
2.13 Detecting Particular Constructs
2.14 Freezing Baselines
2.15 Auditing Of Deployed Software
2.16 Remote Site Diagnosis
2.17 Synchronization Of Remote Sites
2.18 Checking Shipped Computers
2.19 Timestamping
2.20 Certification Of Critical Records
2.21 Certification Of CD-ROMs
2.22 Checking File System Topology
2.23 FreeVeracity And PGP

3 FreeVeracity Files

3.1 Introduction
3.2 Snapshot File
3.3 Backshot File
3.4 Report File
3.5 Journal File
3.6 ClipFile
3.7 Shell File
3.8 Header File
3.9 Temporary File

4 Clipfiles

4.1 Introduction
4.2 Specifying Clipfiles
4.3 The Default Clipfile
4.4 Patterns
4.5 Actions
4.6 Clipping Directories And Files
4.7 Additive And Subtractive Forms
4.8 Clipfile Layout
4.9 Managing Clipfiles
4.10 Checking Clipfiles
4.11 A Critical Issue

5 A Clipfile Cookbook

5.1 Introduction
5.2 Fast Checking
5.3 Thorough Checking
5.4 Monitoring The Top Directory
5.5 Monitoring Directory Structure
5.6 Subdirectories Of A Given Name
5.7 Monitoring Specific Files
5.8 Monitoring Executable Files
5.9 Monitoring Source Files
5.10 Monitoring System Files
5.11 Monitoring File Lengths
5.12 Monitoring A Vault
5.13 Detecting Particular Constructs

6 Scripting

6.1 Introduction
6.2 Useful Command Line Arguments
6.3 Scripting Using The Operating System Shell
6.4 Suppressing Success Messages
6.5 Scripting Using The FreeVeracity Shell
6.6 Spacing, Comments And The Write Command
6.7 Shellscript Arguments And Macros
6.8 Diagnostics
6.9 Other Shell Commands
6.10 Automated Checking

7 Verifying File Transfers

7.1 Introduction
7.2 Threats To Safe File Transfer
7.3 Transfers Between Identical Operating Systems
7.4 Problems With Verifying Heterogeneous File Transfers
7.5 Fuzzy Filename Matching
7.6 Text File Transfer Verification
7.7 Portable Text Files
7.8 Portable Patterns
7.9 A Recommended Transfer Procedure
7.10 Checking Cross Mounting Software

8 Security Applications

8.1 Introduction
8.2 Ensure That Your Data Is Not Already Corrupted
8.3 The Essentials Of FreeVeracity Security
8.4 Eliminating Modification Windows
8.5 Changing Clipfiles: Crossovers
8.6 Choosing A Signature
8.7 Passwords
8.8 Guard The Path
8.9 Counterfeit Patches
8.10 Multiuser Machines
8.11 Viruses
8.12 A FreeVeracity Security Checklist
8.13 Summary

9 Notarizing

9.1 Introduction
9.2 The Non-Invertibility Of Digest Algorithms
9.3 How To Timestamp A File
9.4 How To Timestamp A Tree Of Files
9.5 Legal Limitations Of Digital Notarization
9.6 Notarization Application Ideas
9.7 Summary

10 Defend Your Data!

10.1 Introduction
10.2 Quality Through Process Or Test
10.3 Active Care Of Your Data
10.4 Summary

11 Pitfalls To Avoid

11.1 Introduction
11.2 General Pitfalls
11.3 Command Line Pitfalls
11.4 Pattern Pitfalls
11.5 Action Pitfalls
11.6 Checks You Can Perform
11.7 Summary

12 An Introduction To Checksums And Digests

12.1 Introduction
12.2 Checksums
12.3 Problems With Checksums
12.4 Digest Algorithms
12.5 How Secure Are Digest Algorithms?
12.6 Summary

13 Symbolic Links

13.1 Introduction
13.2 File Types
13.3 Monitoring Symlinks
13.4 Following Symlinks
13.5 Summary

14 Directory Cycles

14.1 Introduction
14.2 How Cycles Arise
14.3 FreeVeracity's Default Behaviour
14.4 Legitimizing Cycles
14.5 Monitoring Cycleness
14.6 Following Cycles
14.7 Cycle Clipfile Cookbook
14.8 Summary

Appendix A: Glossary

Appendix B: References

For a precise definition of FreeVeracity's features, please refer to the FreeVeracity Reference Manual .