To detect changes of system files, use SHA-256 rather than MD5,

taking advantage of naddy@'s recent mtree(8) modernization.
While here, do not provide an example protecting a home directory
from file changes; protect some system binaries instead.
ok naddy@ jmc@

2 files changed, 12 insertions, 12 deletions

diff --git a/share/man/man5/changelist.5 b/share/man/man5/changelist.5
index fb0d133f1f5..b67ae0b3a27 100644
--- a/share/man/man5/changelist.5
+++ b/share/man/man5/changelist.5
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: changelist.5,v 1.7 2011/04/18 23:58:45 schwarze Exp $
+.\"	$OpenBSD: changelist.5,v 1.8 2012/07/08 21:48:38 schwarze Exp $
 .\"
 .\" Copyright (c) 2003 Jason McIntyre <jmc@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: April 18 2011 $
+.Dd $Mdocdate: July 8 2012 $
 .Dt CHANGELIST 5
 .Os
 .Sh NAME
@@ -85,12 +85,12 @@ beginning with a
 character
 .Pq generally non-text files
 are stored as
-.Xr md5 1
+.Xr sha256 1
 checksums.
 Results are mailed in the following format:
 .Bd -unfilled -offset indent
 ======
-/etc/ssh/ssh_host_key MD5 checksums
+/etc/ssh/ssh_host_key SHA-256 checksums
 ======
 OLD:
 NEW:
@@ -113,7 +113,7 @@ Directory containing file backups.
 .El
 .Sh SEE ALSO
 .Xr diff 1 ,
-.Xr md5 1 ,
+.Xr sha256 1 ,
 .Xr daily 8 ,
 .Xr security 8
 .Sh HISTORY
diff --git a/share/man/man8/security.8 b/share/man/man8/security.8
index bc69b39fac1..0c44815a118 100644
--- a/share/man/man8/security.8
+++ b/share/man/man8/security.8
@@ -1,8 +1,8 @@
-.\" $OpenBSD: security.8,v 1.20 2011/04/19 05:17:24 jmc Exp $
+.\" $OpenBSD: security.8,v 1.21 2012/07/08 21:48:38 schwarze Exp $
 .\"
 .\" David Leonard, 2001. Public Domain.
 .\"
-.Dd $Mdocdate: April 19 2011 $
+.Dd $Mdocdate: July 8 2012 $
 .Dt SECURITY 8
 .Os
 .Sh NAME
@@ -79,12 +79,12 @@ These lists should be kept in
 and filenames must have the suffix
 .Dq .secure .
 The following example shows how to create such a list,
-to protect the home directory of user
-.Dq bob :
+to protect the programs in
+.Pa /bin :
 .Bd -literal -offset 4n
-# mtree -cx -p /home/bob -K md5digest,type \*(Gt/etc/mtree/bob.secure
-# chown root:wheel /etc/mtree/bob.secure
-# chmod 600 /etc/mtree/bob.secure
+# mtree -cx -p /bin -K sha256digest,type > /etc/mtree/bin.secure
+# chown root:wheel /etc/mtree/bin.secure
+# chmod 600 /etc/mtree/bin.secure
 .Ed
 .Pp
 .Sy Note: