Description
Detects unexpected changes in files under /boot. It is useful for administrators who want a simple warning when bootloader, kernel, initramfs, or related boot files change.
Boot integrity checks can reveal suspicious or accidental changes, but they also need updates after legitimate kernel and bootloader upgrades. Treat warnings as prompts to investigate, not automatic proof of compromise.