Re: aide or tripwire
From: Rob 'Feztaa' Park (feztaa@shaw.ca)Date: 12/18/01
- Previous message: David Chin: "Re: Logcheck entries"
- In reply to: Jim Zajkowski: "Re: aide or tripwire"
- Next in thread: bugtraq@seifried.org: "Re: aide or tripwire"
- Next in thread: dewt: "Re: aide or tripwire"
- Reply: bugtraq@seifried.org: "Re: aide or tripwire"
- Reply: Jason Kohles: "Re: aide or tripwire"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 18 Dec 2001 15:24:22 -0700 From: Rob 'Feztaa' Park <feztaa@shaw.ca> To: focus-linux@securityfocus.com
On Mon, Dec 17, 2001 at 08:34:01PM -0500, Jim Zajkowski (dis)graced my inbox with:
> Of course, you should still protect your tripwire database by burning it onto
> CD, since tripwire has no protection against the database being deleted,
> only modified.
Or you could just set the file(s) immuteable flag with 'chattr -i', and
the file cannot be changed or deleted.
-- Rob 'Feztaa' Park feztaa@shaw.ca -- "You're one of those condescending Unix computer users!" "Here's a nickel, kid. Get yourself a real computer." -- Dilbert comic
- application/pgp-signature attachment: stored
- Previous message: David Chin: "Re: Logcheck entries"
- In reply to: Jim Zajkowski: "Re: aide or tripwire"
- Next in thread: bugtraq@seifried.org: "Re: aide or tripwire"
- Next in thread: dewt: "Re: aide or tripwire"
- Reply: bugtraq@seifried.org: "Re: aide or tripwire"
- Reply: Jason Kohles: "Re: aide or tripwire"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]