On Mon, Oct 09, 2006 at 04:07:52PM -0400, stuartv wrote: > In the company I work for's ever expanding quest for PCI certification, > I am told that we are required to have in place something to monitor all > system files and log files for changes. Does anyone have any suggestions > on software to do this? I am currently looking at Osiris but would like > some input as to what is out there and actually being used by people.
Well, /etc/security already does some of this. See security(8) for more info; you can extend it pretty easily. Otherwise, there's AIDE or Tripwire, among others. -- o--------------------------{ Will Maier }--------------------------o | web:.......http://www.lfod.us/ | [EMAIL PROTECTED] | *------------------[ BSD Unix: Live Free or Die ]------------------*