TripWire was Genroo rsync Server Compromised
James McDonald
james
Mon May 17 11:56:30 PDT 2004
>> >I've used it.... it works.
>> >
>> >But setting it up is a chore (getting error messages of files that
>> don't exist on your distro or files that change regularly) It can
>> be done...
>> >
>> >However, you'll find that you get so many messages of file changes
>> that you most likely will soon not pay attention to them.
>> >
>> >
>> >
>> >
>> Exactly the problem I'm having. I just set up tripwire, and the output
>> includes all of /proc, some of /var/log, 171790 is the file size of
>> the report! This is the default debian configuration, and will be
>> modified if I keep using it, but wow! too much!
>>
Well that answers the why does tripwire find nonexistant files question....
--
James McDonald
Systems Engineer
Singleton NSW Australia
More information about the Linux-users
mailing list