From owner-freebsd-security@FreeBSD.ORG  Tue Nov 30 17:15:51 2010
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 8A969106564A
	for <freebsd-security@freebsd.org>;
	Tue, 30 Nov 2010 17:15:51 +0000 (UTC) (envelope-from m@micheas.net)
Received: from mail-qw0-f54.google.com (mail-qw0-f54.google.com
	[209.85.216.54])
	by mx1.freebsd.org (Postfix) with ESMTP id 4BD288FC08
	for <freebsd-security@freebsd.org>;
	Tue, 30 Nov 2010 17:15:50 +0000 (UTC)
Received: by qwj9 with SMTP id 9so510353qwj.13
	for <freebsd-security@freebsd.org>;
	Tue, 30 Nov 2010 09:15:50 -0800 (PST)
MIME-Version: 1.0
Received: by 10.224.2.79 with SMTP id 15mr388199qai.388.1291135472226; Tue, 30
	Nov 2010 08:44:32 -0800 (PST)
Received: by 10.220.193.141 with HTTP; Tue, 30 Nov 2010 08:44:32 -0800 (PST)
In-Reply-To: <4CF511C7.3050702@secnap.net>
References: <4CF511C7.3050702@secnap.net>
Date: Tue, 30 Nov 2010 08:44:32 -0800
Message-ID: <AANLkTin0BcdPyQDt=M+x3nXuCeF9JLeJ1FXuCViN9ufc@mail.gmail.com>
From: Micheas Herman <m@micheas.net>
To: freebsd-security@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Subject: Re: any interest in tripwire commercial?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Nov 2010 17:15:51 -0000

On Tue, Nov 30, 2010 at 7:01 AM, Michael Scheidell <scheidell@secnap.net> w=
rote:
> Any interest in Tripwire Commercial version?

Maybe

> I have a client who wants to allow their enterprise tripwire console to b=
e
> able to monitor the servers that do the real work (the freebsd servers) a=
s
> well as the token windows servers which are being monitored now.
>
> What version would you like to see it on? one of the .[135] versions for
> long life?
>
> 7.3? amd64? 8.1?

I tend to use the most current version that I have tested. (IE most
current) I generally use AMD64, but also i386.

> is i386 ok, as long as all the libraries exist?

Probably.

> does everyone put 32 bit compatibility libraries in their amd64 builds?
> ______

Never, unless running cosed source software. It seems to triple your
attack surface area.

You are vulnerable to 64bit exploits, 32bit exploits and exploits of
the translation layer.

Sort of lame of security software to increase your vulnerability.

________________________________________________________________
> This email has been scanned and certified safe by SpammerTrap(r). For
> Information please see http://www.secnap.com/products/spammertrap/
> ______________________________________________________________________
> =A0_______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.or=
g"
>