On Wednesday 02 January 2002 09:16, Caldera OpenLinux Benutzer wrote: > Hello Folks, > > > i just installed tripwire and everythings seems to be fine. > The only thing i am worrying about are fake Reports send to > me. If the System is hacked and compromised between two > Tripwire runs, could't the hacker stop the Cronjob and starts > sending me a fake-report telling everythings fine ? > > I could put the /etc/crontab on a read-only media, but what would > that help ? > > > > Any Hints welcome, > > Regards, > Philipp Steinkrüger Configure tripwire so there is always something to report (which only you know). If you receive a report saying "all's right with the world", then you know someting is very wrong. -- Robin Lynn Frank
Director of Operations Paradigm-Omega, LLC ============================================================ For security reasons, no attachments or HTML content will be accepted. ============================================================ Copyright © 2002. All rights reserved. Unauthorized reproduction or distribution is prohibited.
