.\" Originally written by CIAC with the following copyright notice and
.\" modified by the CERT Coordination Center.
.\"
.\" Copyright (c) 1994.  The Regents of the University of California.
.\" All rights reserved.
.\" 
.\" This work was produced under the sponsorship of the U.S.  Depart-
.\" ment of Energy under contract number W-7405-ENG-48.
.TH MD5CHECK 1 "21 February 1994"
.AT 3
.SH NAME
md5check \- check MD5 checksums of critical system files
.SH SYNOPSIS
.na
.B nawk -f md5check database [...]
.ad
.SH DESCRIPTION
.LP
\fIMd5check\fP is a nawk script that compares the MD5 checksums of
system files with a specified database of known good checksums.
\fIMd5check\fP will generate a report
indicating which files did or did not match checksums in the database.
.LP
A failed match does not necessarily indicate the presence of a Trojan horse,
instead it simply means that the checksum was not found in the named
list of checksums.  The file's authenticity should be verified against
distribution media or other known good version.
.LP
A successful match indicates that the corresponding file has not been
modified from the original used to generate the database.