Changeset 161 for trunk/docs/HOWTO-write-modules.html
- Timestamp:
- Jan 23, 2008, 7:16:05 PM (17 years ago)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk/docs/HOWTO-write-modules.html
r1 r161 662 662 When checking files, samhain will walk the database to find files that 663 663 are in the database, but have been deleted from the disk. If you enter 664 non-file data, you need to mark it as such by using a key that 665 starts with a 'K'. 664 data, you need to mark it as such by using a key that 665 starts with something else but '/', otherwise samhain will complain 666 if it has not been checked during the file check. 666 667 </p> 667 668 <pre> … … 682 683 (max. (PATH_MAX-1)/2). As noted 683 684 above, you need to supply a key (stored as the 'filepath', which should 684 start with the character 'K'). To retrieve data, you can use685 start with a character different from '/'). To retrieve data, you can use 685 686 'sh_hash_db2pop'. The return value is either NULL (if no string was 686 687 stored under this key), or the stored string (length returned in 'size').
Note:
See TracChangeset
for help on using the changeset viewer.