<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
<br>
<br>
Rod Hauser wrote:<br>
<blockquote type="cite" cite="mid200404272021.54175.rod42@cyberspace.org">
<pre wrap="">Bastille is a good tool, as well as a good learning experience.
So is the CISecurity benchmark
<a class="moz-txt-link-freetext" href="http://www.cisecurity.org/bench_linux.html">http://www.cisecurity.org/bench_linux.html</a>
which is particularly designed to be non-invasive tools.
Neither one will make your system bullet-proof, but both will help you keep
from being the lowest-hanging fruit to be attacked.
Rod
</pre>
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">I know that someone posted it before, but I couldn't find any references
to a Tripwire substitute.
</pre>
</blockquote>
<pre wrap="">Aide is a pretty good sub. Google for the homepage.
</pre>
</blockquote>
<pre wrap=""><!----><a class="moz-txt-link-freetext" href="http://www.cs.tut.fi/~rammer/aide.html">http://www.cs.tut.fi/~rammer/aide.html</a>
<a class="moz-txt-link-freetext" href="http://sourceforge.net/projects/aide">http://sourceforge.net/projects/aide</a>
</pre>
</blockquote>
<div class="moz-signature">RedHat have phased out Tripwire from their
EL range. They tout the use of 'RPM -V [options] [filename]' It does a
fairly decent job - if you only use RPMs for your package
installations. However - if you're aiming at hard security it would be
wise to only use base distro releases in the first case and harldy ever
compiled from archived in the second. The return values take a moment
to decipher and as of yet I haven't tried getting a cron job enabled to
do this and report anything back - although this shouldn't take very
long if one needed to.<br>
<br>
neil.<br>
</div>
</body>
</html>