Article View: comp.security.misc
Article #293Re: Beta testers needed for security tool
From: william E Davidsen
Date: Tue, 08 Sep 1992 19:37
Date: Tue, 08 Sep 1992 19:37
25 lines
1953 bytes
1953 bytes
In article <h+y1H-q$h9@atlantis.psu.edu>, barr@pop.psu.edu (David Barr) writes:
| So flip the write-protect switch on the floppy. No program is a
| panacea. This sounds like a wonderful tool, regardless.
|
| Without knowing the full mechanism by which tripwire works, discussions
| like this are of limited usefulness. If your system regularly has been
| compromised to the point that you can't trust your kernel, you
| shouldn't be trusting Tripwire alone anyway. If we're going to be
| paranoid, make a miniroot disk, and put all the stuff on there. I
| kinda doubt it would all fit, however. A floppy with tripwire, related
| programs, a known good copy of the runtime C library, and the database
| should be enough.
I have used the free brik program for some time, as a protection
against corruption rather than breakin, although it certainly is useful
there, too. I list all the files which are critical and create a master
list using the "generate list" mode. Then I check all of those files
from time to time, and after every boot.
This may do more than that, I'm not sure.
--
bill davidsen, GE Corp. R&D Center; Box 8; Schenectady NY 12345
I admit that when I was in school I wrote COBOL. But I didn't compile.
Technical Details
Message-ID:
<1992Sep8.193751.19270@crd.ge.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!crdgw1!rdsunx.crd.ge.com!ariel!davidsenReferences:
<Bu6r2q.AG5@mentor.cc.purdue.edu> <CKD.92Sep6222202@loiosh.eff.org> <1992Sep7.102653.18888@zooid.guild.org> <h+y1H-q$h9@atlantis.psu.edu>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!crdgw1!rdsunx.crd.ge.com!ariel!davidsen From: davidsen@ariel.crd.GE.COM (william E Davidsen) Newsgroups: comp.security.misc,alt.security,alt.sources.d,comp.sources.testers,comp.unix.admin Subject: Re: Beta testers needed for security tool Message-ID: <1992Sep8.193751.19270@crd.ge.com> Date: 8 Sep 92 19:37:51 GMT References: <Bu6r2q.AG5@mentor.cc.purdue.edu> <CKD.92Sep6222202@loiosh.eff.org> <1992Sep7.102653.18888@zooid.guild.org> <h+y1H-q$h9@atlantis.psu.edu> Sender: usenet@crd.ge.com (Required for NNTP) Reply-To: davidsen@crd.ge.com (bill davidsen) Organization: GE Corporate R&D Center, Schenectady NY Lines: 25 Nntp-Posting-Host: ariel.crd.ge.com