hacking security forum

Re: [Full-Disclosure] Cronning Update Jobs <- really a bad idea in Portage

From: Wesley D Craig <wes@umich.edu>
Date: Sun Mar 28 2004 - 17:03:45 EST

On 28 Mar 2004, at 15:58, Tobias Weisserth wrote:
> There's always the issue of integrity checking. Using automatic updates
> in conjunction with AIDE or Tripwire is pointless. It ruins the
> database
> and makes it very hard to spot unwanted changes each time an automatic
> update is done.

Might suggest that you checkout radmind:

        http://radmind.org

It allows an admin to distinguish between an integrity violation and a
legitimate update.

:wes

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Sun Mar 28 17:42:04 2004

This archive was generated by hypermail 2.1.8 : Sun Mar 28 2004 - 18:02:31 EST

Custom Search