Date: Thu, 6 Apr 1995 03:26:09 +0200 (MET DST) From: roberto@blaise.ibp.fr (Ollivier Robert) To: jkh@freefall.cdrom.com (Jordan K. Hubbard) Cc: current@freefall.cdrom.com Subject: Re: "Cookbook" for security. Message-ID: <199504060126.DAA11619@blaise.ibp.fr> In-Reply-To: <15076.797078123@freefall.cdrom.com> from "Jordan K. Hubbard" at Apr 5, 95 03:35:23 am
next in thread | previous in thread | raw e-mail | index | archive | help
> extracting these extra flags ANYWAY, we might as well make a virtue of
> a vice and go "cookbook" style on it, where some central well-known
> file contains information that can be used to apply the flags in
> question after the system is installed. For that matter, the file can
> also contain MD5 checksums so that you can verify that all the
> "important" files have not been changed from the release copies.
> Needless to say, the "cookbook" file should be highly immutable itself
> in these cases :-).
Check Tripwire from Gene Spafford and ???. It does exactly that with
5 or more "checksums" including md5, snefru, SHA, and so on.
--
Ollivier ROBERT -=- The daemon is FREE! -=- roberto@FreeBSD.ORG
FreeBSD keltia 2.1.0-Development #7: Thu Mar 23 00:28:31 MET 1995
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199504060126.DAA11619>