Re: [Security-Discuss] Diff check reports

On Jun 9, 2004, at 11:13 AM, Anton J Aylward CISSP CISA wrote:

>> No, it's not tripwire, it's msec doing a simply md5 comparison of 
>> files.
>
> OK, but how can I reset the baseline?

There is no baseline (or, rather, yesterday's report was the baseline). 
  It's a diff... it compares the previous day's checks to today's 
checks.

If you're referring to the rpm test ("files in these packages have 
changed"), the baseline is rpm itself.  If you change a config file, it 
will forever show up as a changed file.

-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD : 88D8 0D23 8D4B 3407 5BD7  66F9 2043 D0E5 FE6F 2AFD}