Hi etopeter
First you want to select the files you wish to protect from changes. Besides binaries, don't forget conf files.
Next you need to decide what action to take if one of those files gets modified. Most binaries and stock conf
files can be restored by simply rebooting. Your initrd and vmlinuz need to be handled separately. You
might package backup copies in a tcz. Upon detecting a change, load the tcz and copy them to their
default locations and then reboot. You also need to plan your backup strategy. If you have a conf file you've
customized and it gets modified, you don't want to run a backup on it before rebooting. If you have work
files in your home directory that you back up, you may wish to devise a way to back them up without backing
up system settings should they get modified.