🚀 go-pugleaf

In article <sims.715743134@starbase> sims@drake.mitre.org (Jim Sims) writes:
>(buncha stuff about a utility to diff files as a security measure deleted)
>
> It seems to me rather useless and extremely CPU and I/O expensive to diff
>files as a security measure. 

Well, every little bit helps.  If I can run this thing once or twice per
week without melting my CPU or I/O controller, it's worth it.

>How ooften you gonna run this thing? Every 10
>minutes? What's the expected delta between logins that someone could be
>snagging passwords on your system? Seems like better control over changing
>the files is the answer rather than finding out afterwards....

In theory, you're absolutely right.  In reality, there will always be a
hole of which you are unaware.  I'd like to have something like Tripwire
"looking over my shoulder".

> If I was gonna hack some system, I'd be sure the first thing I'd do to is
>find the root's version of tripwire and change it to *always* spit out the
>"don' worry, be happy message"....

Of course, that'll be hard to do if I keep the binary(ies) encrypted (or
on a Sun floppy)......8)

--Wes

-- 
MORGAN@UKCC         |       Wes Morgan       |        ...!ukma!ukecc!morgan 
morgan@ms.uky.edu   | Engineering  Computing |   morgan@wuarchive.wustl.edu
morgan@engr.uky.edu | University of Kentucky | JWMorgan@dockmaster.ncsc.mil
  Mailing list for AT&T StarServer S/E  - starserver-request@engr.uky.edu