monitor remote rpm database

James McKenzie jjmckenzie51 at earthlink.net
Fri Dec 31 04:32:57 UTC 2004


mnikhil m wrote:
> Gr8 Man , by this way can you also please point me to the docs of this
> , how to setup and howto .... :)
> 
> 
> On Thu, 30 Dec 2004 01:57:29 -0400, Jorge Fábregas <fabregasj at prtc.net> wrote:
> 
>>On Thursday 30 December 2004 1:49 am, mnikhil m wrote:
>>
>>>Now I am  looking at other alternative
>>>http://www.tripwire.org/ as someone informed me that  the rpm database
>>>can be spoofed.
>>
>>I use rkhunter. Take a look at:
>>
>>http://www.rootkit.nl/projects/rootkit_hunter.html
>>

Download and go.  It also installs a .daily cron.  Oh, it must be 
installed as root.

So far, no bad guys.

James McKenzie




More information about the users mailing list