Re: File System Integrity Checker for Sarge
Tripwire in sarge works very well.
I also like fcheck. It's very fast and it does it's job.
>From apt-cache show fcheck:
Description: IDS filesystem baseline integrity checker
The fcheck utility is an IDS (Intrusion Detection System)
which can be used to monitor changes to any given filesystem.
.
Essentially, fcheck has the ability to monitor directories, files
or complete filesystems for any additions, deletions, and modifications.
It is configurable to exclude active log files, and can be ran as often
as needed from the command line or cron making it extremely difficult to
circumvent.
On Sun, 02 Jan 2005 23:20:30 +1100, Declan Mullen <declan@mullen.net.au> wrote:
> Hi,
>
> I'm looking for a file system integrity checker for Sarge. There seem to
> be many to choose from (eg sXid, AIDE, TripWire, integrit and samhain).
>
> Is there one that stands out as being easy to configure/tune for Sarge ?
>
> To date the only one I've used is Tripwire (on Redhat).
>
> Regards,
> Declan
>
> --
> To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>
--
----)(-----
Luis M
System Administrator
LatinoMixed.com
"We think basically you watch television to turn your brain off, and
you work on your computer when you want to turn your brain on" --
Steve Jobs in an interview for MacWorld Magazine 2004-Feb
No .doc: http://www.fsf.org/philosophy/no-word-attachments.es.html
Reply to: