Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Feb 1996 10:32:06 -0500
From:      "Garrett A. Wollman" <wollman@lcs.mit.edu>
To:        Mark Murray <mark@grondar.za>
Cc:        Jim Dennis <jimd@mistery.mcafee.com>, freebsd-security@FreeBSD.ORG
Subject:   Re: tripwire, xinetd (or tcp wrappers) 
Message-ID:  <9602131532.AA30430@halloran-eldar.lcs.mit.edu>
In-Reply-To: <199602130627.IAA03049@grumble.grondar.za>
References:  <199602130627.IAA03049@grumble.grondar.za>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Tue, 13 Feb 1996 08:27:55 +0200, Mark Murray <mark@grondar.za> said:

> You amy want to have a look at COPS, also from CERT. FreeBSD already
> does a lot of what COPS does (scan for SUID file changes etc), but
> it will give you some ideas.

Indeed, FreeBSD already gives you the ability to scan your entire
installation for files which have changed from some pre-defined
profile; see mtree(8).  At one point in time, I created code for `make
release' which would automatically generate the appropriate mtree
files for each distribution.

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9602131532.AA30430>