AIDE/Tripwire (was: Re: was there an advertised ETA for the next beta?)

[Leonard den Ottolander]

Hi Michael,

> I don't know how Red Hat have
> created the default file, but it *might* be an idea to automate it based
> on the files listed in rpmdb-redhat.

 You don't really need the rpmdb. Just finding all files in the 
relevant directories and generating the twpol from that is quite easy 
to accomplish and causes less overhead than using the rpmdb. Something 
like

for dr in /bin /sbin /usr/bin /usr/sbin /lib 
do
  find /bin -type f -exec echo -e "  {}\t\t\t-> \$(SEC_CRIT2) ;" >> 
twpol.tmp \;
done

(/etc is a bit more difficult than this of course.)

Bye,
Leonard.

--
How clean is a war when you shoot around nukelar waste?
Stop the use of depleted uranium ammo!
End all weapons of mass destruction.