On Mon, May 24, 2010 at 9:38 PM, Christophe Kalt <k...@taranis.org> wrote: > I've had my own home-grown tool for so long that I haven't looked at any of > these for many years, but one question I always have is this: If one > modifies a file that is not under the control of your tool of choice, does > it get flagged as having been modified?
Isnt this why we run (or should run) tripwire, aide, ossec-hids, etc? There is even integrity checking in cfengine[1]. :P Seriously though, we this it extensively at $job. [1]: http://www.cfengine.org/manuals/cf2-Reference.html#Checksums-and-change-management _______________________________________________ Discuss mailing list Discuss@lopsa.org http://lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
