Re: aide or tripwire

From: Rob 'Feztaa' Park (feztaa@shaw.ca)
Date: 12/18/01


Date: Tue, 18 Dec 2001 15:24:22 -0700
From: Rob 'Feztaa' Park <feztaa@shaw.ca>
To: focus-linux@securityfocus.com


On Mon, Dec 17, 2001 at 08:34:01PM -0500, Jim Zajkowski (dis)graced my inbox with:
> Of course, you should still protect your tripwire database by burning it onto
> CD, since tripwire has no protection against the database being deleted,
> only modified.

Or you could just set the file(s) immuteable flag with 'chattr -i', and
the file cannot be changed or deleted.

-- 
Rob 'Feztaa' Park
feztaa@shaw.ca
--
"You're one of those condescending Unix computer users!"
"Here's a nickel, kid. Get yourself a real computer." 
		-- Dilbert comic