Re: [Security-Discuss] Tripwire Policy File for MDK Server
Michael Hearne <[email protected]> Fri, 05 Aug 2005 19:56:52 -0500
| Newsgroups | gmane.linux.mandrake.security.general |
|---|---|
| Message-ID | <[email protected]> |
Jean-Pierre Denis wrote: > Hi, > > >>>> did someone tweek a tripwire policy file for mandriva 10, 10.1 ? >>>> >>>> The template shipped is bassed on a Red Hat server template and there >>>>is alot of tweeking to do in order to make it accurate. >>>> >>>> Also, are there any mandriva specific stuff that I should add to the >>>>policy ( other than the drak... binary and friends. ) >>>> >>> >>>Yes I have a couple of versions. If you would like me to send them to >>>you, tell me how you'd like it done (attachment, inline, etc. They are >>>kind of long for inline). > > > If you can, send me one and for each version of mdk and I will sort it into > one master policy file that would apply to all the version. Attachement > would be better. If you want I can attach them in QA. > > Let me know. > > > >>I don't use tripwire ... but if consensus is reached on a reasonable >>template file, I can ensure it is added to the package ... it may be >>easiest for everyone if someone files a bug at http://qa.mandriva.com, >>and then files can be attached there. > > > > Ok that is a good idea. I will go ahead and do this. I will let everyone > know when my mdk version of the tripwire policy is ready. > > > > Merci, > Jean-Pierre Denis > (LPIC1 - LPIC2) > WebGlobe Solutions TI > email: jp-nwfNr1S2xsksA/[email protected] > tel.: (819) 246-0WWW (0999) > www: http://www.webglobe.ca > Well good Jean-Pierre, I am not experienced in submitting these things. I sent you my version, so I hope it helps with the final product. You probably should try tripwire, just to see how it works. It can be set to be very verbose, or not to warn you at all unless the threat is vital. For most ordinary users the warnings should probably be set to "info" (Please see http://www.die.net/doc/linux/man/man8/tripwire.8.html ). I receive my tripwire reports every morning via kmail. Thanks, Michael -- RLU #352695 35.14N-101.50W GPG-1024D/01774F35
message.footer
(text/plain, 232 B)
____________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com Join the Club : http://www.mandrivaclub.com ____________________________________________________