Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Jan 2004 16:56:25 -0500 (EST)
From:      Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
To:        hawkeyd@visi.com
Cc:        security at FreeBSD <freebsd-security@FreeBSD.ORG>
Subject:   mtree vs tripwire
Message-ID:  <200401142156.i0ELuPTE018028@khavrinen.lcs.mit.edu>
In-Reply-To: <20040114134215.GA21307@sheol.localdomain>
References:  <20040114134215.GA21307@sheol.localdomain>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Wed, 14 Jan 2004 07:42:15 -0600, D J Hawkey Jr <hawkeyd@visi.com> said:

> What sort of pitfalls should I be aware of?

mtree files don't scale very well, and to make proper use of them for
this purpose requires a great deal more thought.  Tripwire is a bit
more "pre-thunk", and uses a database instead of a flat file, which
speeds updates.  (With mtree you'd have to rescan the entire
filesystem.)

-GAWollman



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200401142156.i0ELuPTE018028>