From owner-freebsd-security  Mon Oct 25  4:34:16 1999
Delivered-To: freebsd-security@freebsd.org
Received: from mail.euroweb.hu (mail.euroweb.hu [193.226.220.4])
	by hub.freebsd.org (Postfix) with ESMTP id 2751E14A10
	for <freebsd-security@freebsd.org>; Mon, 25 Oct 1999 04:34:12 -0700 (PDT)
	(envelope-from hu006co@mail.euroweb.hu)
Received: (from hu006co@localhost)
	by mail.euroweb.hu (8.8.5/8.8.5) id NAA15593;
	Mon, 25 Oct 1999 13:34:09 +0200 (MET DST)
Received: (from zgabor@localhost)
	by CoDe.hu (8.8.8/8.8.8) id NAA00482;
	Mon, 25 Oct 1999 13:24:16 +0200 (CEST)
	(envelope-from zgabor)
From: Zahemszky Gabor <zgabor@CoDe.hu>
Message-Id: <199910251124.NAA00482@CoDe.hu>
Subject: Re: file security utility
In-Reply-To: <001b01bf1e10$20288660$0100a8c0@m1> from Artem Koutchine at "Oct 24, 99 03:08:27 pm"
To: freebsd-security@freebsd.org
Date: Mon, 25 Oct 1999 13:24:16 +0200 (CEST)
Cc: matrix@gerpa.ru
X-Mailer: ELM [version 2.4ME+ PL38 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> I don't know is such utility already exists so here is
> what i need it to do:
> 1) Check files using filters and all specified filesystems for
> change in size/date/time/mode/owner/name change
> 2) Files/Dirs/Filesystems must be groupped into several types and for
> each type must be specified allowed (not dangerous)
> modifications (chmod and mask, owner and list of possible
> owners, size and range for size, name change and regexp for
> name, access and time range for possible access and so on,
> deletion)
> 3) Only for those files/dirs/filesystems which have been
> changes in a dangerous manner (not described as allowed)
> a report is generated. Or, at least, they are put first, so i don't
> have to look through a long list of modified files.
> 
> Is there such utility ? If not I'll do it (i hope), because i really need it.

1) tripwire
2) home-made script(s) with the unknown FreeBSD mtree(8) command

ZGabor at CoDe dot HU

-- 
#!/bin/ksh
Z='21N16I25C25E30, 40M30E33E25T15U!' ;IFS=' ABCDEFGHIJKLMNOPQRSTUVWXYZ ';set $Z ;for i { [[ $i = ? ]]&&print $i&&break;[[ $i = ??? ]]&&j=$i&&i=${i%?};typeset -i40 i=8#$i;print -n ${i#???};[[ "$j" = ??? ]]&&print -n "${j#??} "&&j=;typeset +i i;};IFS=' 0123456789 ';set $Z;X=;for i { [[ $i = , ]]&&i=2;[[ $i = ?? ]]||typeset -l i;X="$X $i";typeset +l i;};print "$X"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message