Re: online cheksum verification for FreeBSD

2010-03-10 Thread Julian Elischer
Elmar Stellnberger wrote: The only thing that I have found about it is: "DS Compare the system against a "known good" index of the installed release.'" As well as freebsd-update(8), the FreeBSD base system includes mtree(8) - which can be used to generate and check file hashes. Other tools, s

Re: online cheksum verification for FreeBSD

2010-03-10 Thread Daniel Roethlisberger
Elmar Stellnberger 2010-03-10: > > I notice that your tool only appears to store MD5 hashes - I presume > > you are aware that the MD5 algorithm has been shown to have a number > > of weaknesses and is not recommended for new applications. This > > is why FreeBSD has moved to using a combination

Re: online cheksum verification for FreeBSD

2010-03-10 Thread Peter Jeremy
On 2010-Mar-10 15:22:32 +0100, Elmar Stellnberger wrote: > I believe it would be highly desireable to have an online md5sum >verification for FreeBSD as this is already implemented by checkroot >(http://www.elstel.com/checkroot/) for openSUSE. You are welcome to adapt your tool to support FreeBS

FreeBSD 7.2-RELEASE EoL delayed to end of June 2010

2010-03-10 Thread FreeBSD Security Officer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Everyone, In keeping with the FreeBSD Security Team policy concerning the EoL dates for "Normal" support releases, "a minimum of 12 months after the release, and for sufficient additional time (if needed) to ensure that there is a newer rele

Re: online cheksum verification for FreeBSD

2010-03-10 Thread Elmar Stellnberger
>> The only thing that I have found about it is: >> "DS Compare the system against a "known good" index of the installed >> release.'" > > As well as freebsd-update(8), the FreeBSD base system includes > mtree(8) - which can be used to generate and check file hashes. Other > tools, such as trip

online cheksum verification for FreeBSD

2010-03-10 Thread Elmar Stellnberger
online cheksum verification for FreeBSD I believe it would be highly desireable to have an online md5sum verification for FreeBSD as this is already implemented by checkroot (http://www.elstel.com/checkroot/) for openSUSE. This is often the only way to spot an intrusion. Keeping external md5sum