Re: secure UNIX log server

From: mack23 (
Date: 05/30/02

From: (mack23 )
Date: 30 May 2002 14:05:45 GMT

In article <>,
fanny <> wrote:
>to be useful. I keep pushing for tripwire but not yet succesfully.
>I'm interested in hearing about other peoples experiences defining
>auditing policies. Regards.

Your auditors need to be educated regarding the costs of all the manual
Mickey Mouse that they apparently have no problem with vs. the cost of
automating much of it via Tripwire. My suggestion would be to make your
case for Tripwire in terms they can understand (to wit: $$), rather than
in terms which technical folks might prefer (right tool for the job, etc).