Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Gentoo: Security

Sane default tripwire policy file



Gentoo security RSS feed   Index | Next | Previous | View Threaded

bulliver at badcomputer

Sep 6, 2006, 2:24 PM

Post #1 of 1 (785 views)
Sane default tripwire policy file

I spent several hours yesterday and today fleshing out a proper default policy
file for Gentoo. Now we don't have use the crappy Redhat version from 2002
that ships with tripwire. I have made it more 'gentooesque' by arranging the
files/rules based on the package that installs them rather than their
function. Now a Gentoo system admin can simply comment out an entire block of
rules for packages that are not installed. I hope it works well for people,
and maybe after a bit of tweaking by a dev we can get it bundled with the
tripwire install.

I posted it (along with more explanation) over at gentoo bugzilla[1]. I plan
to improve it even more, and add rules for commonly installed apps such as
Apache, MySql, Bind, PHP, syslog-ng, vixie-cron and so on. I will post all my
revisions on my personal site[2].

[1] http://bugs.gentoo.org/show_bug.cgi?id=34662
[2] http://badcomputer.org/unix/tripwire.pol.gentoo

darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972

Gentoo security RSS feed   Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.