-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 25/04/10 10:00 AM, Russ Allbery wrote:
>> PCI compliance doesn't go into details. The whole thing is a crock of
>> shit really. Installation of tripwire was one of the requirements on the
>> list of 10,000 or so, so that's what I am trying to implem
Douglas Garstang writes:
> What about the script that mounts the file system? That could be
> compromised. This seems somewhat like security via obscurity to me.
> Your security is only as good as it's weakest link, and the script that
> runs every day would be the weakest link. Therefore, there
On Sat, Apr 24, 2010 at 5:00 PM, Russ Allbery wrote:
> Douglas Garstang writes:
>> On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery wrote:
>
>>> I think that if you're installing Tripwire policy files on local disk,
>>> I would take a step back and see if you have a better design available.
>>> Tri
Douglas Garstang writes:
> On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery wrote:
>> I think that if you're installing Tripwire policy files on local disk,
>> I would take a step back and see if you have a better design available.
>> Tripwire is the poster child for something that really wants a
>
On Sat, Apr 24, 2010 at 4:27 PM, Russ Allbery wrote:
> Douglas Garstang writes:
>
>> I am trying to write a module for tripwire. I need to push out the
>> twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not
>> currently exist.
>
>> How can do I this with File{}? I'm can't see
Douglas Garstang writes:
> I am trying to write a module for tripwire. I need to push out the
> twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not
> currently exist.
> How can do I this with File{}? I'm can't seem to find a way to do it.
> In general times, how can you depl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
> How can do I this with File{}? I'm can't seem to find a way to do it.
> In general times, how can you deploy file A only when file B does not
> exist?
use a fact indicating that file A exists.
cheers pete
-BEGIN PGP SIGNATURE-
Version: GnuP
I am trying to write a module for tripwire. I need to push out the
twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do
not currently exist.
How can do I this with File{}? I'm can't seem to find a way to do it.
In general times, how can you deploy file A only when file B does not
e
