put a copy of tripwire and a smaller database on a read only device (zip
disk mabee ? we use a floppy) and that way the user will need access to
the physical machine to be able to do something that you describe.
on another note, a system we had setup to do this mailed out daily reports
for around 3-4 years all running off a floppy that had never been replaced
and was still 100% error free :) we were suprised the floppy had lasted
so well.
means you would potentially get two reports but hey :) whats a little more
e-mail these days ?
--
Steve.
On Wed, 12 Apr 2000 [EMAIL PROTECTED] wrote:
> What stops the intruder from disabling tripwire and replacing it with
> some kind of system to just keep mailing the last good copy of the
> database? This would be the equivilent of putting the picture of the
> inside of the empty safe in front of the security camera while you
> ransack it. :-)
>
> b.
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
