[gentoo-security] tripwire policy generator

[Tom Hosiawa]

I've used tripwire a little bit, and I'm starting to like it.

The biggest problem I see with it, is the default policy is setup for
Red Hat, not for Gentoo. I know a Gentoo policy file exists in bugzilla,
but I'm thinking of creating a script to generate the policy file based
specifically on installed packages in portage.

So before I go ahead with this plan, I thought I get some feedback on my
ideas.

>From playing around with the policy file, I see it groups and
categorizes files into different security types and priorities such as
critical, suid, config , log, etc.  

So for every installed package, I would put it into its own group. Than
I would assign binary files (/bin, /usr/bin), superuser files (/sbin,
/usr/sbin), suid (search for them), config (/etc), log (/var/log) files
into their appropriate categories.

Finally, providing options to generate it for only system packages with
no user input, and individual package selection should be an option.

Tom


--
gentoo-security@g.o mailing list