[geeks] Tripwire alternatives?

[Scott Howard]

On Tue, Nov 01, 2005 at 06:39:05PM -0500, Patrick Giagnocavo 717-201-3366 wrote:
> On Tue, 2005-11-01 at 14:22, Bill Bradford wrote:
> > What are good modern Tripwire alternatives?
> 
> A Solaris-only tool is BART, see Glen Brunette's blog here:

There's a good BluePrint on using BART, SSH, RBAC and privleges together.
Solaris 10 only (BART and Ppriv) but it's still a good concept/framework
for any other OS.

Ohh.. and if you haven't look at privileges you should - it's probably the
2nd coolest thing in S10 (after DTrace)

> Dunno if BART is part of OpenSolaris or not...

Yup.
http://cvs.opensolaris.org/source/xref/usr/src/cmd/bart/
I haven't looked at it, but I suspect it would be trivial to port.

  Scott.