From owner-freebsd-security@FreeBSD.ORG Wed Jan 14 10:38:55 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CC06B16A4D3 for ; Wed, 14 Jan 2004 10:38:55 -0800 (PST) Received: from theinternet.com.au (c211-30-103-113.carlnfd1.nsw.optusnet.com.au [211.30.103.113]) by mx1.FreeBSD.org (Postfix) with ESMTP id A16FD43D5D for ; Wed, 14 Jan 2004 10:38:53 -0800 (PST) (envelope-from akm@theinternet.com.au) Received: from theinternet.com.au (akm@localhost [127.0.0.1]) by theinternet.com.au (8.12.9/8.12.9) with ESMTP id i0EIcotN057845; Thu, 15 Jan 2004 05:38:50 +1100 (EST) (envelope-from akm@theinternet.com.au) Received: (from akm@localhost) by theinternet.com.au (8.12.9/8.12.9/Submit) id i0EIcoAk057844; Thu, 15 Jan 2004 05:38:50 +1100 (EST) Date: Thu, 15 Jan 2004 05:38:50 +1100 From: Andrew Kenneth Milton To: D J Hawkey Jr Message-ID: <20040114183850.GM57209@zeus.theinternet.com.au> References: <20040114134215.GA21307@sheol.localdomain> <20040114180931.GA17074@miracle.mongers.org> <20040114182154.GA22444@sheol.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040114182154.GA22444@sheol.localdomain> User-Agent: Mutt/1.4.1i cc: security at FreeBSD cc: Jesper Louis Andersen Subject: Re: mtree vs tripwire X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jan 2004 18:38:55 -0000 +-------[ D J Hawkey Jr ]---------------------- | On Jan 14, at 07:09 PM, Jesper Louis Andersen wrote: | > | > > This might seem really naive, but can mtree be used effectively as | > > a native-to-core-OS tripwire equivalent? Would it be as efficient in | > > terms of time-to-run and resource requirements? | > | > Pro: distributed with base | > Con: Only available for *BSD architectures as far as my knowledge goes. | | I'm aware of both, yes; hence my question. FreeBSD is all I'm dealing | with, where my question is concerned. | | Is your reply from personal experience, or is it the same "Hey, it | could..." as is my question? If the former, would you elaborate on the | implementation details? The manpage for mtree has an example... -- Totally Holistic Enterprises Internet| | Andrew Milton The Internet (Aust) Pty Ltd | M:+61 416 022 411 | ACN: 082 081 472 ABN: 83 082 081 472 |akm@theinternet.com.au| Carpe Daemon