Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Jan 2008 10:15:12 +0000
From:      "Rob Gallagher" <rob.gallagher@gmail.com>
To:        "Jordi Espasa Clofent" <jordi.espasa@opengea.org>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Anti-Rootkit app
Message-ID:  <1d7a7b9d0801140215j2073fe4dr3d7da4c304160c0a@mail.gmail.com>
In-Reply-To: <478A84DD.3040205@opengea.org>
References:  <478A84DD.3040205@opengea.org>

index | next in thread | previous in thread | raw e-mail

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Jordi,

On 13/01/2008, Jordi Espasa Clofent  wrote:
> Hi all,
>
> I need to install an anti-rootkid in a lot of servers. I know that
> there're several options: tripwire, aide, chkrootkit...
>
> ¿What do you prefer?
>
> Obviously, I have to define my needs:
>
> - easy setup and configuration
> - actively developed
>

I've used Integrit (http://integrit.sourceforge.net) on quite a number
of machines. It's very easy to setup and get going quickly. There is a
port, but it doesn't seem to have been updated to the latest version
(4.1) yet.

rg

- --
rob.gallagher (at) gmail.com || www.spoofedpacket.net || PK: 0x1DD13A78

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (FreeBSD)
Comment: http://firegpg.tuxfamily.org

iD8DBQFHizYviSgypR3ROngRAgUSAKCZPgDK1On4b8KC3t3YpwfXPDPXUQCeK1n+
bT71FIRYOwrux52TBs0sk50=
=TKd2
-----END PGP SIGNATURE-----

help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1d7a7b9d0801140215j2073fe4dr3d7da4c304160c0a>