I'm going over a monit config file and something doesn't seem right. I'm using monit to monitor the checksum of the sshd binary, if its different from whats expected it should reload a known binary. Is the below section correct for checking the checksum on the ssh binary? What does the monit daemon compare the current checksum with? No where in the file do I see any other mention of the checksum or outside tool to check the checksum.
check process ssh with pidfile "/var/run/sshd.pid" start program = "/sbin/service sshd start" stop program = "/sbin/service sshd stop" depends on sshd_binary check file sshd_binary with path /usr/sbin/sshd if failed checksum then alert