www.LinuxHowtos.org

qtegrity

Section: qtegrity (1)
Updated: Feb 2026
Index Return to Main Contents

NAME

qtegrity - verify files with IMA

SYNOPSIS

qtegrity [opts] <misc args>

DESCRIPTION

The default behavior of qtegrity is to verify digests of performed executables to a list of known good digests. This requires an IM-enabled linux kernel, which records digests of performed executables and exports them through securityfs. Using --ignor-no-existent suppresses messages about recorded files that can't be accessed (assuming they got removed). By using --add, the program behaves differently. No verification is performed, instead a digest is made of the provided file and appended to the list of known good digests.

OPTIONS

-a <arg>, --add <arg>: Add file to store of know-good digests.
-i, --ignore-non-existent: Be silent if recorded file no longer exists.
-s, --show-matches: Show recorded digests that match with know-good digests.
--root <arg>: Set the ROOT env var.
-v, --verbose: Report full package versions, emit more elaborate output.
-q, --quiet: Tighter output; suppress warnings.
-C, --nocolor: Don't output color.
--color: Force color in output.
-h, --help: Print this help and exit.
-V, --version: Print version and exit.

RELEVANT FILES

Central list of known good digests

        /var/db/QTEGRITY

Linux kernel's recorded digests
        /sys/kernel/security/ima/ascii_runtime_measurements

REPORTING BUGS

Please report bugs via http://bugs.gentoo.org/
Product: Gentoo Linux; Component: Current packages

AUTHORS

Ned Ludd <solar@gentoo.org>
Mike Frysinger <vapier@gentoo.org>
Fabian Groffen <grobian@gentoo.org>
Sam Besselink