Gentoo Archives: gentoo-security

From: darren kirby <bulliver@×××××××××××.org>
To: gentoo-security@l.g.o
Subject: [gentoo-security] Sane default tripwire policy file
Date: Wed, 06 Sep 2006 21:53:15
Message-Id: 200609061424.47676.bulliver@badcomputer.org
1 I spent several hours yesterday and today fleshing out a proper default policy
2 file for Gentoo. Now we don't have use the crappy Redhat version from 2002
3 that ships with tripwire. I have made it more 'gentooesque' by arranging the
4 files/rules based on the package that installs them rather than their
5 function. Now a Gentoo system admin can simply comment out an entire block of
6 rules for packages that are not installed. I hope it works well for people,
7 and maybe after a bit of tweaking by a dev we can get it bundled with the
8 tripwire install.
9
10 I posted it (along with more explanation) over at gentoo bugzilla[1]. I plan
11 to improve it even more, and add rules for commonly installed apps such as
12 Apache, MySql, Bind, PHP, syslog-ng, vixie-cron and so on. I will post all my
13 revisions on my personal site[2].
14
15 [1] http://bugs.gentoo.org/show_bug.cgi?id=34662
16 [2] http://badcomputer.org/unix/tripwire.pol.gentoo
17
18 -d
19 --
20 darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
21 "...the number of UNIX installations has grown to 10, with more expected..."
22 - Dennis Ritchie and Ken Thompson, June 1972