Bugtraq mailing list archives

Re: Verifying file data integrity using L6


From: jrg () BLODWEN DEMON CO UK (James R Grinter)
Date: Sun, 20 Dec 1998 12:30:05 +0000


Ng Pheng Siong <ngps () POST1 COM> writes:
I've toyed with putting a wrapper around l5 to make it work like tripwire,
but that means handling all the integrity database maintenance that tripwire
does. In essence, reinventing tripwire. ;-|

This seems to be something that a good backup/archive system[1] ought
to be recording whilst it backs up files, so that one could simply run
a check of all files on a system against those in the database.

(For bonus marks, it could ring alarm bells when a file's checksum has
changed whilst the timestamps remain the same. Or allow custom rules
and queries to be implemented to monitor what has changed.)

James.
[1. Unfortunately. I've not met many good backup/archive systems.]



Current thread: