|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
file security utility
Artem Koutchine (matrix
gerpa.ru)
Sun, 24 Oct 1999 15:08:27 +0400
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
- Next message: Will Andrews: "RE: file security utility"
- Previous message: Mark Newton: "Re: kernel patch to detect port scan, without turning on ports..."
- Next in thread: Will Andrews: "RE: file security utility"
- Reply: Will Andrews: "RE: file security utility"
- Reply: Fernando Schapachnik: "Re: file security utility"
- Reply: Zahemszky Gabor: "Re: file security utility"
I don't know is such utility already exists so here is
what i need it to do:
1) Check files using filters and all specified filesystems for
change in size/date/time/mode/owner/name change
2) Files/Dirs/Filesystems must be groupped into several types and for
each type must be specified allowed (not dangerous)
modifications (chmod and mask, owner and list of possible
owners, size and range for size, name change and regexp for
name, access and time range for possible access and so on,
deletion)
3) Only for those files/dirs/filesystems which have been
changes in a dangerous manner (not described as allowed)
a report is generated. Or, at least, they are put first, so i don't
have to look through a long list of modified files.
Is there such utility ? If not I'll do it (i hope), because i really need it.
Also, the tech question is how do i detect renaming. I quite sure that
file is not just specified by its name by i-node or something. So, so
do i detect that a file has been renamed but it is still the same file?
Artem Koutchine (Артем Кучин)
Sys/Net/Web Admin, Web Designer, Programmer
WWW: http://idesign.pp.ru E-Mail: matrix
chat.ru
No attachments w/o my permission!!!
(Не присылайте файлы без разрешения!!!)
To Unsubscribe: send mail to majordomo
FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
- Next message: Will Andrews: "RE: file security utility"
- Previous message: Mark Newton: "Re: kernel patch to detect port scan, without turning on ports..."
- Next in thread: Will Andrews: "RE: file security utility"
- Reply: Will Andrews: "RE: file security utility"
- Reply: Fernando Schapachnik: "Re: file security utility"
- Reply: Zahemszky Gabor: "Re: file security utility"
This archive was generated by hypermail 2.0b3 on Sun Oct 24 1999 - 06:07:00 CDT