[rescue] SGI fw_sshd and security

[Kevin]

I do it for all servers whose config doesn't change within six
months.  For us, that's most of them.

/KRM

On Mon, 8 Mar 2004 12:41:39 -0500
Dave McGuire <mcguire at neurotica.com> wrote:

> On Mar 8, 2004, at 9:28 AM, Kevin wrote:
> > Your Tripwire database, executable binary and tw.config file
> > are supposed to be located on read only media.  An attacker
> > could edit the cron process, that runs Tripwire
> > automatically, to run a hacked version, but that would still
> > fail with manual audits which should be done at least once a
> > week.
> 
>    Yes, supposed to be...but who actually does that?
> 
>          -Dave
> 
> --
> Dave McGuire                      "My tummy hurts now, but my
> soul Cape Coral, FL                   feels a little better."  
>   -Ed
> _______________________________________________
> rescue list - http://www.sunhelp.org/mailman/listinfo/rescue


-- 
keyserver: http://pgp.mit.edu/