check file passwd with path /etc/passwd
    if failed checksum and 
       expect the 1a4749a0f41e47eb9339da32adbbcf14 sum then alert
    if failed permission 644 then alert
    if failed uid root then alert
    if failed gid root then alert