[Infrastructures] Tripwire

John Borwick borwicjh@wfu.edu
Mon, 25 Jul 2005 13:03:28 -0400


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig1A74AEF5ADAC39D762C7C122
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Wesley Craig wrote:
[...]
> This tool:
> 
>     http://radmind.org
> 
> is very much like a combination of Tripwire & cfengine, in the sense 
> that it will both tell you that something has changed *and* will 
> configure your hosts to match a centrally managed description.

Just FYI, cfengine can compute checksums.  For example:

files:

 /usr/*/bin
 checksum=md5
 recurse=inf

Will create checksums of all your /usr/whatever/bin directories.
Control parameters, "ChecksumPurge" and "ChecksumUpdates", then tell
cfengine when it's OK to update the checksum database.

Yours,
John
-- 
           John Borwick
       Systems Analyst Lead
      Wake Forest University | web  http://www.wfu.edu/~borwicjh
      Winston-Salem, NC, USA | GPG key ID             0x797326D5

--------------enig1A74AEF5ADAC39D762C7C122
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFC5Rtg/81sF3lzJtURAmMBAJ9HxTTpckkCK/2Tl6X4sjZ3zW44igCgpYqE
A/ygnrsmZYpI9xZ+pScQE6w=
=CoGl
-----END PGP SIGNATURE-----

--------------enig1A74AEF5ADAC39D762C7C122--