From owner-freebsd-security Sun May 14 7:30: 2 2000 Delivered-To: freebsd-security@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id DB51D37B614 for ; Sun, 14 May 2000 07:29:57 -0700 (PDT) (envelope-from Cy.Schubert@uumail.gov.bc.ca) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id HAA07649; Sun, 14 May 2000 07:28:38 -0700 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda07645; Sun May 14 07:28:34 2000 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.9.3/8.9.1) id HAA78759; Sun, 14 May 2000 07:28:30 -0700 (PDT) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpdk78757; Sun May 14 07:28:00 2000 Received: (from uucp@localhost) by cwsys.cwsent.com (8.10.1/8.9.1) id e4EERx101152; Sun, 14 May 2000 07:27:59 -0700 (PDT) Message-Id: <200005141427.e4EERx101152@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdoa1147; Sun May 14 07:27:19 2000 X-Mailer: exmh version 2.1.1 10/15/1999 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-OS: FreeBSD 4.0-STABLE X-Sender: cy To: Garrett Wollman Cc: Cy Schubert - ITSD Open Systems Group , Mark Murray , Paul Hart , freebsd-security@FreeBSD.ORG Subject: Re: envy.vuurwerk.nl daily run output In-reply-to: Your message of "Thu, 11 May 2000 23:06:57 EDT." <200005120306.XAA22136@khavrinen.lcs.mit.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Sun, 14 May 2000 07:27:18 -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In message <200005120306.XAA22136@khavrinen.lcs.mit.edu>, Garrett Wollman write s: > < Cy.Schubert@uumail.gov.bc.ca> said: > > > I think that having tripwire or something with the same functionality > > and features should be included in the base system. > > We do. It would take a bit of work to create an `exclude' file (see > my recent commit) so that constantly-changing files would not raise > alarms, but otherwise `mtree -K md5digest,sha1digest,ripemd160digest' > should do the trick. Any chance of the new exclude code being MFC'd into -stable any time soon? Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/DEC Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message