[redhat-lspp] File Integrity Tests from RBAC

[Steve Grubb]

Hello,

I was wondering how we were planning to address these items in the RBAC specs:

>FPT_TST.1.2 The TSF shall provide authorised users with the capability to
>verify the integrity of TSF data.

>FPT_TST.1.3 The TSF shall provide authorised users with the capability to
>verify the integrity of stored TSF executable code. 

Is this traditionally done with something like tripwire? What other solutions 
do we have to this? If we use rpm --verify, it is likely to complain about 
all the chmods that were done to meet the security target.

-Steve