From owner-freebsd-security  Thu Apr 19 20:18: 5 2001
Delivered-To: freebsd-security@freebsd.org
Received: from backup.af.speednet.com.au (af.speednet.com.au [202.135.188.244])
	by hub.freebsd.org (Postfix) with ESMTP id 4A30237B422
	for <freebsd-security@FreeBSD.ORG>; Thu, 19 Apr 2001 20:17:52 -0700 (PDT)
	(envelope-from andyf@speednet.com.au)
Received: from backup.af.speednet.com.au (backup.af.speednet.com.au [172.22.2.4])
	by backup.af.speednet.com.au (8.11.3/8.11.3) with ESMTP id f3K3Gtc14728;
	Fri, 20 Apr 2001 13:16:55 +1000 (EST)
	(envelope-from andyf@speednet.com.au)
Date: Fri, 20 Apr 2001 13:16:54 +1000 (EST)
From: Andy Farkas <andyf@speednet.com.au>
X-X-Sender:  <andyf@backup.af.speednet.com.au>
To: Rob Simmons <rsimmons@wlcg.com>
Cc: Jason DiCioccio <geniusj@bluenugget.net>,
	Emre Bastuz <info@emre.de>, <freebsd-security@FreeBSD.ORG>
Subject: Re: Tripwire or the like for FreeBSD ?
In-Reply-To: <20010419230519.F85568-100000@mail.wlcg.com>
Message-ID: <Pine.BSF.4.33.0104201312460.14592-100000@backup.af.speednet.com.au>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=X-UNKNOWN
Content-Transfer-Encoding: QUOTED-PRINTABLE
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


Search the -security mailing list for "alternative tripwire options" and
you'll find a message by Garrett Wollman that says:

> In any event, try (in 5-current and 4-stable):
>
> =09# mtree -ciK md5digest,sha1digest,ripemd160digest -p / \
> =09> >my.file.list
>
> To check, use:
>
> =09# mtree -p / my.file.list
>
> You will probably find a significant number of files which are
> expected to change; you'll want to list these in a separate file and
> regenerate the list using the `-X' option.  (You'll then also want to
> check the list using the same option.)  At some point, I'll try to
> come up with a list which could serve as a starting point.


On Thu, 19 Apr 2001, Rob Simmons wrote:

> Please do :)
>
> http://www.freebsd.org/doc/en_US.ISO_8859-1/books/handbook/contrib.html#C=
ONTRIB-WHAT
>
> See #6 in High priority tasks.
>
> Robert Simmons
> Systems Administrator
> http://www.wlcg.com/
>
> On Thu, 19 Apr 2001, Jason DiCioccio wrote:
>
> > couldn't you could easily hack something up using mtree?
> > ----- Original Message -----
> > From: "Emre Bastuz" <info@emre.de>
> > To: <freebsd-security@freebsd.org>
> > Sent: Thursday, April 19, 2001 12:30 PM
> > Subject: Tripwire or the like for FreeBSD ?
> >
> >
> > > Hi,
> > >
> > > I was just wondering if there is Tripwire for FreeBSD or some decent =
tool
> > > that has similar/better functionality ?
> > >
> > > The Tripwire homepage seems to bee pretty commercial and lacks a BSD
> > > version (they seem to be focused on Linux).
> > >
> > > I found something called "Aide" in the ports directory, but to be hon=
est -
> > > I don=B4t trust a "Version 0.7" when it comes to security.
> > >
> > > Does anyone know any alternative ?
> > >
> > > Regards,
> > >
> > > Emre
> > >
> > > --
> > > Emre Bastuz
> > > info@emre.de              http://www.emre.de
> > > UIN: 561260           PGP Key ID: 0xAFAC77FD
> > >
> > > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > > with "unsubscribe freebsd-security" in the body of the message
> > >
> > >
> >
> >
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.4 (FreeBSD)
> Comment: For info see http://www.gnupg.org
>
> iD8DBQE636fov8Bofna59hYRA3fnAKDBzE+dCxBb6ZZc0rRyLSF7E0ISCQCghL23
> wQIM9wTnvZQPigab/oZYpZI=3D
> =3DlQWF
> -----END PGP SIGNATURE-----
>
>

--

 :{ andyf@speednet.com.au

        Andy Farkas
    System Administrator
   Speednet Communications
 http://www.speednet.com.au/




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message