GNU cfengine
3.8.8 ChecksumUpdates
This variable defaults to `off'. If set to true, cfagent will
automatically update the checksum of a file, if it changes on the disk.
This means that a security warning will be issued only once
about files which have changed, and the changed version will be re-registered
as the correct version. This option could be switched on after a
system upgrade, for instance, in order to update the database, and then
switched to `off' again to reduce the risk of missing a security
alert. Alternatively, if you are confident that the first message is
sufficient, it can be left as `on' so that only one message is
given.
