On Fri, 12 Apr 2002, LTG wrote: l> Hi all, l> l> I use SuSE7.2 right now. I want to install tripwire in this box. Where l> can I get SuSE tripwire package? I can get from l> www.tripwiresecurity.com Tripwire-1.3.1-1.tar.gz. But it was tested l> with RedHat6.0 only. l> You can get it within the (sec) series on either the CD's, DVD or FTP site. The config file sample is contained within the /usr/share/doc location. It's been modified from the original from what I can remember of the package I downloaded from tripwire back then. Oh, and it's an older version, 1.2 whereas on the tripwire site you can get an eval version of 2.4.2 and the sourceforge site 2.3.1, so, depending on what your looking for, current or suse compiled. That's what's available at this time. Whether you get a current release or the SuSE package, either is going to require editing in the end (in my opinion). l> Thanks in advance l> l> Regards, l> l> LTG l> -- S.Toms - smotrs at mindspring.com - www.mindspring.com/~smotrs SuSE Linux v7.3+ - Kernel 2.4.10-4GB

On Mon, Apr 15, 2002 at 06:49:24PM +0200, Praise wrote:

...

I use SuSE7.2 right now. I want to install tripwire in this box. Where can I get SuSE tripwire package?

It are not very far from you. It are on the CDs:-) At least it was there in 7.1

By the way, if you want to use tripwire securely, I recommend two things: 1. Recompile tripwire to be statically linked. 2. After you create your tripwire database, copy it and the the config file (tw.config) AND the static program to a secure media (CD or write protected floppy) so you can guarantee that no has tampered with your system. Best Regards, Keith -- LPIC-2, MSCE, N+ I can C for miles and miles Got spam? Get SPASTIC http://spastic.sourceforge.net

On Mon, Apr 15, 2002 at 09:09:00PM -0400, Doug McGarrett wrote:

The Linux Journal Magazine for February of this year reports that Tripwire has been taken proprietary. I don't have the mag in front of me, but inquiry on Googol would surely be helpful. They also say that Tripwire is the best of the lot. So pay the man! --doug

Tripwire was originally developed at the University of Purdue and was distributed as open source up through version 1.2. After that, IIRC, a couple of the original developers started the commercial tripwire company and they have continued to develop it as closed source for a fee (incuding a Windows version). When I evaluated the commercial version, I found that it had a lot of overhead and stuff I didn't need/want. I actually prefer the 1.2 open source version because it creates much smaller databases and runs faster. However, if anyone wants to use tripwire, you should do your own evaluation of the two versions to see which makes more sense for your situation. Best Regards, Keith -- LPIC-2, MCSE, N+ I can C for miles and miles Got spam? Get SPASTIC http://spastic.sourceforge.net