check file passwd with path /etc/passwd
    if failed checksum and 
       expect the INSERTMD5CHECKSUMHERE sum then alert
    if failed permission 644 then alert
    if failed uid root then alert
    if failed gid root then alert