Re: Debian audititing tool?

2000-12-23 Thread Peter Eckersley
On Sat, Dec 23, 2000 at 03:30:08PM -0400, Peter Cordes wrote: > On Fri, Dec 22, 2000 at 11:05:32PM -0900, Ethan Benson wrote: > > On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote: > > > > > > That's why you run the checker from a known-good floppy or CD. The bogus > > > kernel can't

Re: Debian audititing tool?

2000-12-23 Thread Peter Eckersley
On Sat, Dec 23, 2000 at 03:30:08PM -0400, Peter Cordes wrote: > On Fri, Dec 22, 2000 at 11:05:32PM -0900, Ethan Benson wrote: > > On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote: > > > > > > That's why you run the checker from a known-good floppy or CD. The bogus > > > kernel can't

Re: More detailed auditing design proposal

2000-12-23 Thread Lupe Christoph
On Sunday, 2000-12-24 at 02:59:23 +1100, Peter Eckersley wrote: > I threw together a detailed design proposal for a simpler system; it's > sitting at > http://www.cs.mu.oz.au/~pde/antiparanoia/design.txt > I've started implementing a few bits and pieces of it, but I'd > appreciate comments and c

Re: Debian audititing tool?

2000-12-23 Thread Peter Cordes
On Fri, Dec 22, 2000 at 11:05:32PM -0900, Ethan Benson wrote: > On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote: > > > > That's why you run the checker from a known-good floppy or CD. The bogus > > kernel can't protect itself if it isn't running :) > > don't be so sure, is the BIOS

Re: More detailed auditing design proposal

2000-12-23 Thread Chuan-kai Lin
Peter Eckersley <[EMAIL PROTECTED]> wrote: > I've started implementing a few bits and pieces of it, but I'd > appreciate comments and constructive criticism before I do too much. The basic goal looks nice (especially the Debian-specific part), however on the implementation side... the need to rebo

Re: More detailed auditing design proposal

2000-12-23 Thread Lupe Christoph
On Sunday, 2000-12-24 at 02:59:23 +1100, Peter Eckersley wrote: > I threw together a detailed design proposal for a simpler system; it's > sitting at > http://www.cs.mu.oz.au/~pde/antiparanoia/design.txt > I've started implementing a few bits and pieces of it, but I'd > appreciate comments and

Re: Debian audititing tool?

2000-12-23 Thread Peter Cordes
On Fri, Dec 22, 2000 at 11:05:32PM -0900, Ethan Benson wrote: > On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote: > > > > That's why you run the checker from a known-good floppy or CD. The bogus > > kernel can't protect itself if it isn't running :) > > don't be so sure, is the BIO

More detailed auditing design proposal

2000-12-23 Thread Peter Eckersley
Hello again... Thankyou to the people who offered encouragement, useful suggestions and the opportunity to thoroughly defend my proposal :) I investigated FreeVeracity as a possible basis for a Debian auditing system. I'd actually seen the original announcement on slashdot, but payed more attent

Re: More detailed auditing design proposal

2000-12-23 Thread Chuan-kai Lin
Peter Eckersley <[EMAIL PROTECTED]> wrote: > I've started implementing a few bits and pieces of it, but I'd > appreciate comments and constructive criticism before I do too much. The basic goal looks nice (especially the Debian-specific part), however on the implementation side... the need to reb

More detailed auditing design proposal

2000-12-23 Thread Peter Eckersley
Hello again... Thankyou to the people who offered encouragement, useful suggestions and the opportunity to thoroughly defend my proposal :) I investigated FreeVeracity as a possible basis for a Debian auditing system. I'd actually seen the original announcement on slashdot, but payed more atten

Re: Debian audititing tool?

2000-12-23 Thread Rene Mayrhofer
> Also with the Debian Firewall/Gibrator?(sorry for the spelling) does > it include SNMP and remote managibility. SNMP will be included in the next version, and a web interface too. At the moment it is fully manageable over ssh. best greets, Rene

Re: Debian audititing tool?

2000-12-23 Thread Rene Mayrhofer
> Also with the Debian Firewall/Gibrator?(sorry for the spelling) does > it include SNMP and remote managibility. SNMP will be included in the next version, and a web interface too. At the moment it is fully manageable over ssh. best greets, Rene -- To UNSUBSCRIBE, email to [EMAIL PROTECTED]

Re: Debian audititing tool?

2000-12-23 Thread Ethan Benson
On Fri, Dec 22, 2000 at 05:54:55PM -0400, Peter Cordes wrote: > > That's why you run the checker from a known-good floppy or CD. The bogus > kernel can't protect itself if it isn't running :) don't be so sure, is the BIOS or firmware on your computer flashable? if so an attacker could replace t