Re: Is there a tripwire group?

From: Michael Schwendt (ms-nospam-0306_at_arcor.de)
Date: 08/15/03

  • Next message: Michael Schwendt: "Re: using mail with linux" 
    To: redhat-list@redhat.com
Date: Fri, 15 Aug 2003 23:06:07 +0200

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    On 15 Aug 2003 16:44:41 -0400, Edward Croft wrote:

    > > > I have tripwire installed on all my servers, yet it is useless because I
    > > > backup the servers and that changes the timestamps so that tripwire
    > > > reports the files.
    > >
    > > I don't understand this. Which timestamps? Last accessed or modified
    > > or changed? Backing up files should only update "last accessed"
    > > which in turn should not trigger Tripwire.
    > >
    > Well, it is triggering tripwire. I know I have not been compromised. I
    > have checked everything thoroughly.

    So, did you check the property masks? Tripwire can check the "last
    accessed" timestamp, provided that you change the default policy
    file and insert the 'a' flag. That would be a very paranoid setting
    and only appropriate for special files which should not be accessed
    by anyone.

    - --
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.2 (GNU/Linux)

    iD8DBQE/PUs/0iMVcrivHFQRAsjGAJwK6tff811X+KSqV6B1hRsFth17jgCfSzIO
    Gh46Ury/e6NPV71cIWpshVo=
    =0iHj
    -----END PGP SIGNATURE----- 

    -- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
  • Next message: Michael Schwendt: "Re: using mail with linux"