By comparing manifests from different systems, you can determine if the systems are installed identically or have been upgraded in synch. For example, if you customized your systems to a particular security target, this comparison finds any discrepancies between the manifest that represents your security target, and the manifests from the other systems.
For the options, see the bart(1M) man page.
On the test system, use the same bart options to create a manifest.
To perform the comparison, copy the manifests to a central location.
If the test system is not an NFS-mounted system, use sftp or another reliable means to copy the manifests to a central location.
Compare the manifests and redirect the output to a file.
This example compares the contents of the /usr/bin directory on two systems.
Create an identical manifest for each system that you want to compare with the control system.
Copy the manifests to the same location.
The output indicates that the group ID of the su file in the /usr/bin directory is not the same as that of the control system. This information might indicate that a different version of the software was installed on the test system. Because the GID is changed, the more likely reason is that someone has tampered with the file.