Great Circle Associates Firewalls
(June 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Tripwire security
From: Chris Edwards <chrise @ tcrystal . gla . ac . uk>
Date: Fri, 17 Jun 1994 17:35:43 +0100
To: Firewalls @ GreatCircle . COM

Wes Morgan writes:

>	- cron job to run Tripwire every night

What stops an attacker replacing your cron job with one that doesn't
run Tripwire at all.  Instead, it simply outputs the original Tripwire
info.

Or am I missing something ?

Chris

----------------------------------------------------------------------------
|             Chris Edwards, Glasgow University, G12 8QQ, UK               |
|   chrise @
 tcrystal .
 gla .
 ac .
 uk                       +44 41 330 4419        |
----------------------------------------------------------------------------

Indexed By Date Previous: Re: Notes from Usenix Firewall BOF
From: dorian @ oxygen . house . gov (Dorian Deane)
Next: TGV Multinet
From: NAME <mecimojs @ clwoc1 . dnet . dupont . com>
Indexed By Thread Previous: Re: Tripwire security
From: morgan @ engr . uky . edu (Wes Morgan)
Next: are you really safe behind your firewall?
From: Paul . Danielson @ West . Sun . COM (Paul Danielson)

Google
 
Search Internet Search www.greatcircle.com