Re: securing a unix system - suggestions on checking for intrusions
Andrew Simpson <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.new-zealand.general |
|---|---|
| Message-ID | <20111006180116.3e4867ea@orion> |
On Thu, 06 Oct 2011 17:33:47 +1300 Robin Sheat <[email protected]> wrote: > Op donderdag 06-10-2011 om 15:24 uur [tijdzone +1300], schreef Robin > Paulson: > > excellent, i'll give it a whirl. but it brings up this question: > > is there anything to check the tripwire database, to ensure it > > hasn't > > been tampered with? > > It gets manually generated, so when you do that, burn it onto a CD-R > (not -RW :) and leave that in the drive. > > It's by no means a foolproof system, but it's better'n nothing. Take an MD5 sum (or SHA1 if you prefer) and write down on a piece of paper. I've yet to see malware that can change writing on paper... Andrew _______________________________________________ NZLUG mailing list [email protected] http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug