# Refresh the Enodia Sentinel file-integrity baseline after every package
# transaction, so legitimate package changes never trigger a FIM alert.
# Install as: /etc/pacman.d/hooks/enodia-sentinel-fim.hook
[Trigger]
Operation = Install
Operation = Upgrade
Operation = Remove
Type = Path
Target = usr/*
Target = etc/*
Target = boot/*
Target = opt/*

[Action]
Description = Refreshing Enodia Sentinel file-integrity baseline...
When = PostTransaction
Exec = /usr/bin/env enodia-sentinel fim-update
Depends = python