if changed checksum       then alert
if failed permission 644  then unmonitor
if failed uid root        then unmonitor
if failed gid root        then unmonitor
