Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Scaricare il pdf (Pagina 147)

Chapter 12.

Installing and Conﬁguring Tripwire

Tripwire software can help to ensure the integrity of critical system ﬁles and directories by identifying

all changes made to them. Tripwire conﬁguration options include the ability to receive alerts via

email if particular ﬁles are altered and automated integrity checking via a cron job. Using Tripwire

for intrusion detection and damage assessment helps you keep track of system changes and can speed

the recovery from a break-in by reducing the number of ﬁles you must restore to repair the system.

Tripwire compares ﬁles and directories against a baseline database of ﬁle locations, dates modiﬁed,

and other data. It generates the baseline by taking a snapshot of speciﬁed ﬁles and directories in a

known secure state. (For maximum security, Tripwire should be installed and the baseline created

before the system is at risk from intrusion.) After creating the baseline database, Tripwire compares

the current system to the baseline and reports any modiﬁcations, additions, or deletions.

Warning

While a valuable tool when auditing the security state of your system, Tripwire is not supported by

Red Hat, Inc.. Contact Tripwire, Inc., (http://www.tripwire.com) for support options.

12.1. How to Use Tripwire

The following ﬂowchart illustrates how Tripwire should be used:

1 2 ... 142 143 144 145 146 147 148 149 150 151 152 ... 281 282

Nessun commento

Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Guida di Installazione Pagina 147