Date: Fri, 7 Dec 2001 17:42:17 -0800 From: "Crist J . Clark" <cjc@FreeBSD.ORG> To: Haikal Saadh <wyldephyre2@yahoo.com> Cc: questions@FreeBSD.ORG Subject: Re: Tripwire questions. Message-ID: <20011207174217.W8975@blossom.cjclark.org> In-Reply-To: <000701c17ee0$e45ae220$d8c801ca@warhawk>; from wyldephyre2@yahoo.com on Fri, Dec 07, 2001 at 10:34:44AM %2B0500 References: <000701c17ee0$e45ae220$d8c801ca@warhawk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Dec 07, 2001 at 10:34:44AM +0500, Haikal Saadh wrote:
> Hi, I just installed tripwire, but with the out of the box config, the
> hashes files 5.7megs...way too much to put on a floppy. So does that
> mean that
> a. I did something wrong,
> b. I should trim my list of things to hash?
c. I should compress it with [bg]zip(1)?
> Also, how safe is it to just set the immutable flag on the database
> file? (Not very, I'm thinking, if an attacker gains root, right?)
That depends on if you are running at an elevated securelevel(8) or
not. Generally speaking, a floppy with the read-write tab flipped out
is a great solution.
--
"It's always funny until someone gets hurt. Then it's hilarious."
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011207174217.W8975>