Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Rhinorhino on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
I am trying to perform a daily main
- Thread starter dsp88
- Start date
KenCunningham
Technical User
Do the files exhibit any particular form of corruption? E.g. could the corruption be grepped for in a script?
- Thread starter
- #5
a) which specific files corrupted
or
b) corrupted in what way
do you mean modified by a virus, caused by hard disk malfunction, caused by malicious users, caused by memory leaks, caused by mistreatment of hardware in general, or files modified by root whilst running, or etc. ...
are you worried about your users/files put there by users, or something wrong with solaris?
or
b) corrupted in what way
do you mean modified by a virus, caused by hard disk malfunction, caused by malicious users, caused by memory leaks, caused by mistreatment of hardware in general, or files modified by root whilst running, or etc. ...
are you worried about your users/files put there by users, or something wrong with solaris?
Do you perhaps mean something like COPS ( or Tripwire (
COPS is a UNIX security status checker. Essentially what it does is check various files and software configurations to see if they have been compromised (edited to plant a trojan horse or back door), and checks to see that files have the appropriate modes and permissions set to maintain the integrity of your security level (make sure that your file permissions don't leave themselves wide open to attack/access).
The current version of COPS (1.04) makes a limited attempt to detect bugs that are posted in CERT advisories. Also, it has an option to generate a limited script that can correct various security problems that are discovered.
Tripwire for Servers software monitors file changes, verifies integrity, and notifies you of any violations of data at rest on network servers. Tripwire for Servers monitors all file changes—regardless of whether they originated inside or outside of your organization. Tripwire for Servers also identifies changes to system attributes including file size, access flags, write time, and more.
Ayjaycee - the "A" in TandA
One by one, the penguins steal my sanity.
COPS is a UNIX security status checker. Essentially what it does is check various files and software configurations to see if they have been compromised (edited to plant a trojan horse or back door), and checks to see that files have the appropriate modes and permissions set to maintain the integrity of your security level (make sure that your file permissions don't leave themselves wide open to attack/access).
The current version of COPS (1.04) makes a limited attempt to detect bugs that are posted in CERT advisories. Also, it has an option to generate a limited script that can correct various security problems that are discovered.
Tripwire for Servers software monitors file changes, verifies integrity, and notifies you of any violations of data at rest on network servers. Tripwire for Servers monitors all file changes—regardless of whether they originated inside or outside of your organization. Tripwire for Servers also identifies changes to system attributes including file size, access flags, write time, and more.
Ayjaycee - the "A" in TandA
One by one, the penguins steal my sanity.
NB: The Open Source version of Tripwire is at ;-) Ayjaycee - the "A" in TandA
One by one, the penguins steal my sanity.
One by one, the penguins steal my sanity.
- Status
Similar threads
- Locked
- Question