TripWire was Genroo rsync Server Compromised

James McDonald james
Mon May 17 11:56:30 PDT 2004


>> >I've used it....  it works.
>> >
>> >But setting it up is a chore (getting error messages of files that
>> don't exist on your distro  or files that change regularly)  It can
>> be done...
>> >
>> >However, you'll find that you get so many messages of file changes
>> that you  most likely will soon not pay attention to them.
>> >
>> >
>> >
>> >
>> Exactly the problem I'm having. I just set up tripwire, and the output
>>  includes all of /proc, some of /var/log, 171790 is the file size of
>> the  report! This is the default debian configuration, and will be
>> modified  if I keep using it, but wow! too much!
>>

Well that answers the why does tripwire find nonexistant files question....


-- 
James McDonald
Systems Engineer

Singleton NSW Australia




More information about the Linux-users mailing list