From owner-freebsd-security@FreeBSD.ORG  Wed Jan 14 10:25:49 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3754816A4CE
	for <freebsd-security@freebsd.org>;
	Wed, 14 Jan 2004 10:25:49 -0800 (PST)
Received: from critter.freebsd.dk (critter.freebsd.dk [212.242.86.163])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CC59743D46
	for <freebsd-security@freebsd.org>;
	Wed, 14 Jan 2004 10:25:46 -0800 (PST)
	(envelope-from phk@phk.freebsd.dk)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
	by critter.freebsd.dk (8.12.10/8.12.10) with ESMTP id i0EIPddN026260;
	Wed, 14 Jan 2004 19:25:39 +0100 (CET)
	(envelope-from phk@phk.freebsd.dk)
To: hawkeyd@visi.com
From: "Poul-Henning Kamp" <phk@phk.freebsd.dk>
In-Reply-To: Your message of "Wed, 14 Jan 2004 12:21:54 CST."
             <20040114182154.GA22444@sheol.localdomain> 
Date: Wed, 14 Jan 2004 19:25:39 +0100
Message-ID: <26259.1074104739@critter.freebsd.dk>
X-Mailman-Approved-At: Thu, 15 Jan 2004 02:56:02 -0800
cc: security at FreeBSD <freebsd-security@freebsd.org>
cc: Jesper Louis Andersen <jlouis@mongers.org>
Subject: Re: mtree vs tripwire 
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Jan 2004 18:25:49 -0000

In message <20040114182154.GA22444@sheol.localdomain>, D J Hawkey Jr writes:
>On Jan 14, at 07:09 PM, Jesper Louis Andersen wrote:
>> 
>> > This might seem really naive, but can mtree be used effectively as
>> > a native-to-core-OS tripwire equivalent? Would it be as efficient in
>> > terms of time-to-run and resource requirements?
>> 
>> Pro: distributed with base
>> Con: Only available for *BSD architectures as far as my knowledge goes.
>
>I'm aware of both, yes; hence my question. FreeBSD is all I'm dealing
>with, where my question is concerned.
>
>Is your reply from personal experience, or is it the same "Hey, it
>could..." as is my question? If the former, would you elaborate on the
>implementation details?

Mtree works as well if not slightly better (knows about file-flags)
on FreeBSD.

I'm using mtree a lot for various purposes, including a
contents-addressable archive system I've been using to make backups
of my home-dir for a couple of years.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.