Tru64 v4.0F file auditing of critical O/S files

From: Chris Los <clos_at_trentu.ca>
Date: Fri, 04 May 2001 12:21:05 -0400

We're running tru64 v4.0f pk0005 and i would like to start monitoring
changes to certain O/S files such as "/usr/bin/login", "/usr/bin/ls"
and "/usr/bin/ps". I've read recently in an issue of Sys Admin that
these, as well as some others
are well known targets for hackers. Is the native tru64 file auditing
system
a good way of monitoring these types of files????? Or would i be better
off
using TripWire???

I would also be interested in any good pointers on how to setup either
of these tools.

TIA,

clos_at_trentu.ca
--
Received on Fri May 04 2001 - 16:22:46 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:42 NZDT