Re: file integrity programs

[Jonathan Rozes <jrozes+973201920.40862727@vinton.com>]

On Thu, 2 Nov 2000, John Smith wrote:

> I have never personally used it or tried it but another file integrity 
> program I know of is AIDE a free replacement to Tripwire.  It is supposedly 
> faster and supports multiple databse types(md5,blowfish etc,etc).

Why not just use mtree(8)? It comes with OpenBSD and is pretty simple to
get started with. In a nutshell, you would do 'mtree -c -k "uid gid mode
link sha1digest"' for static directory trees like /bin and such, then 
maybe just 'mtree -c -k "uid gid mode link"' for dynamic things like log 
files. Copy the specifications to read-only media along with a 
statically-linked copy of the mtree binary and a script to check the 
system against the specification files (or on a bootable image if you're
really paranoid), and voila, you have an integrity checker.

jonathan

+++ Jonathan Rozes, System Administrator, Will Vinton Studios