I am in the process of migrating my service from RedHat to Suse. I was sing tripwire to carry out file level audit on RedHat. I am facing problem in setting up the same on Suse 8.2. It is giving Segmentation Fault. Need your help on this. Also any alternative file integrity tool for suse may be suggested. Regards, Milind
Milind Nanal wrote:
I am in the process of migrating my service from RedHat to Suse. I was sing tripwire to carry out file level audit on RedHat. I am facing problem in setting up the same on Suse 8.2. It is giving Segmentation Fault.
Need your help on this.
Also any alternative file integrity tool for suse may be suggested.
Regards,
Milind
You want AIDE, it's also included in suse's rpm database. ... AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire. It does the same things as the semi-free Tripwire and more. ... http://aide.sf.net
Kai Hauser wrote:
Milind Nanal wrote:
I am in the process of migrating my service from RedHat to Suse. I was sing tripwire to carry out file level audit on RedHat. I am facing problem in setting up the same on Suse 8.2. It is giving Segmentation Fault.
Need your help on this.
Also any alternative file integrity tool for suse may be suggested. Regards,
You want AIDE, it's also included in suse's rpm database.
Actually, AIDE, as I understand it, isn't as secure. Tripwire, unlike AIDE, encrypts the database. AIDE requires that you use read-only media to be effective at all. Unless you have easy physical access to the machine in question, AIDE is pretty much worthless. Milind: Make certain you are using the most up to date version of tripwire. SuSE has, more than once, screwed up the compilation of tripwire and released it without bothering to test it. You might also try an rpm of tripwire that was released for a different SuSE version, it should work. Also, why are you using 8.2?!?! That version is nearing the end of it's lifecycle. 9.1 is the latest and 9.2 will be out next month. 8.2 was release March 2003. That means no more security updates or support after this coming March.
Hello Milind, hello list, * Milind Nanal wrote on Oct/20/2004:
Also any alternative file integrity tool for suse may be suggested.
While I have not yet actually checked it out, I have wanted to have a look at Samhain for quite a long time now. Looks clever. (But has - as far as I am aware of - no rpms.) http://la-samhna.de -- Do NOT add my address to any mailing list without my express written per- mission. Unsolicited commercial email will be proofread at my consul- ting rate of: $75/h, 4 hour minimum. Due to a bug in my mailer any junk- email received will automatic. subscribe the sender to all avail. lists. -- My Public PGP Keys: 1024 Bit DH/DSS: 0x869F81BA 768 Bit RSA: 0x1AD97BA5
participants (4)
-
Andreas Wagner -
Kai Hauser -
Milind Nanal -
suse＠rio.vg