1 |
I spent several hours yesterday and today fleshing out a proper default policy |
2 |
file for Gentoo. Now we don't have use the crappy Redhat version from 2002 |
3 |
that ships with tripwire. I have made it more 'gentooesque' by arranging the |
4 |
files/rules based on the package that installs them rather than their |
5 |
function. Now a Gentoo system admin can simply comment out an entire block of |
6 |
rules for packages that are not installed. I hope it works well for people, |
7 |
and maybe after a bit of tweaking by a dev we can get it bundled with the |
8 |
tripwire install. |
9 |
|
10 |
I posted it (along with more explanation) over at gentoo bugzilla[1]. I plan |
11 |
to improve it even more, and add rules for commonly installed apps such as |
12 |
Apache, MySql, Bind, PHP, syslog-ng, vixie-cron and so on. I will post all my |
13 |
revisions on my personal site[2]. |
14 |
|
15 |
[1] http://bugs.gentoo.org/show_bug.cgi?id=34662 |
16 |
[2] http://badcomputer.org/unix/tripwire.pol.gentoo |
17 |
|
18 |
-d |
19 |
-- |
20 |
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org |
21 |
"...the number of UNIX installations has grown to 10, with more expected..." |
22 |
- Dennis Ritchie and Ken Thompson, June 1972 |