Re: syslog idea
Fred Blonder (fred@nasirc.hq.nasa.gov)
Fri, 07 Oct 1994 12:11:28 -0400
From: "Jonathan M. Bresler" <jmb@kryten.atinc.com>
On Fri, 7 Oct 1994, Fred Blonder wrote:
At the FIRST Conference in Boston a couple months ago, Gene Spafford
^^^^^^^^^^^^^^^^^^
before the latest release of tripwire ;)
. . . said he'd consider it in a future version.
and he did!
Not exactly, the release was 'pending' at the time of the conference,
so I doubt that any major changes occurred between the time of the
conference and the latest release.
take a look at the Changelog and at tw.conf.XXX files. you can
specify that tripwire should ignore changes in size, access
time, modification time and signatures for log files.
Yes, but, that's not the same thing. The point of checkpointing a
logfile would be to verify that the portion up to that last checkpoint
had not been tampered with, that is compute a digital signature for
part of the file.