From owner-freebsd-security Thu Jul 11 23:55: 8 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E3F8737B408 for ; Thu, 11 Jul 2002 23:55:02 -0700 (PDT) Received: from antalya.lupe-christoph.de (pD9E8866F.dip0.t-ipconnect.de [217.232.134.111]) by mx1.FreeBSD.org (Postfix) with ESMTP id E121043E6D for ; Thu, 11 Jul 2002 23:55:01 -0700 (PDT) (envelope-from lupe@lupe-christoph.de) Received: by antalya.lupe-christoph.de (Postfix, from userid 1000) id 2A24574C; Fri, 12 Jul 2002 08:54:59 +0200 (CEST) Date: Fri, 12 Jul 2002 08:54:59 +0200 To: freebsd-security@freebsd.org Subject: Recommendations for filesystem integrity checkers? Message-ID: <20020712065459.GA24030@lupe-christoph.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.3.28i From: lupe@lupe-christoph.de (Lupe Christoph) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi! Which filesystem integrity checkers do people use? I've found ports for aide, cksfv, integrit, l5, three versions of tripwire and yafic. (Feel free to point me to the ones I overlooked.) I did not find ports for fcheck and samhain (found on Debian). Since I don't have the time to assess them all, I would like to tap the collective experience of the FreeBSD security people. So which do you use, and why? Thanks for your time, Lupe Christoph -- | lupe@lupe-christoph.de | http://www.lupe-christoph.de/ | | I have challenged the entire ISO-9000 quality assurance team to a | | Bat-Leth contest on the holodeck. They will not concern us again. | | http://public.logica.com/~stepneys/joke/klingon.htm | To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message