dsill@nswc-oas.arpa (Dave Sill) (07/16/88)
Is there a free utility that reads a file containing a list of files and their modes/owners/groups, compares them to the actual files, and either reports the inconsistencies or corrects them? Just thought I'd check before I re-invent. ========= "We must remove the TV-induced stupor that lies like a fog across the land." -- Ted Nelson
arosen@eagle.ulowell.edu (MFHorn) (07/18/88)
From article <16512@brl-adm.ARPA>, by dsill@nswc-oas.arpa (Dave Sill): > Is there a free utility that reads a file containing a list of files > and their modes/owners/groups, compares them to the actual files, and > either reports the inconsistencies or corrects them? Just thought I'd > check before I re-invent. It's called 'cfs' (Check File Status). You give it a list of files to check, and it reports on changes to almost any field in the stat struct. It's mostly useful to see if anyone has been tampering with system files. The address attached to the README is rex@erebus.stanford.edu, Rex Sanders. I don't know if he supports cfs, or if he is even still at Stanford, but you might want to send him mail. I have no connection with cfs [other than 'I use it'], Rex Sanders or Stanford. Andy Rosen | arosen@hawk.ulowell.edu | "I got this guitar and I ULowell, Box #3031 | ulowell!arosen | learned how to make it Lowell, Ma 01854 | | talk" -Thunder Road RD in '88 - The way it should be
mjh@uunet.uu.net (Mark J. Hewitt) (07/19/88)
There is a shell script to do most of this in Kochan and Wood's book,
"UNIX Security."
Mark J. Hewitt
usenet: ...!{mcvax,uunet}!ukc!kernel!mjh
other: mjh%kernel.uucp@ukc.ac.uk
voice: (+44) 532 444566
fax: (+44) 532 420183
paper: Kernel Technology Ltd,
Development Centre, 46 The Calls,
Leeds, LS2 7EY, West Yorkshire, UKstefan@mikros.systemware.de (Stefan Stapelberg) (07/19/88)
In article <16512@brl-adm.ARPA> dsill@nswc-oas.arpa (Dave Sill) writes: >Is there a free utility that reads a file containing a list of files >and their modes/owners/groups, compares them to the actual files, and >either reports the inconsistencies or corrects them? Just thought I'd >check before I re-invent. Such a utility has been published by P.Wood & S.Kochan in their book UNIX System Security (HaydenBooks, ISBN 0-8104-6267-2) Long time before having net-access, i typed in this nice utility. It is a shell script and very sloooow, but it does the job. As stated in the book, you can order this utility and some others by mailing your address to phw5!secure. I tried this several times, but always the mail got bounced somewhere. If you're interested, send me an e-mail. Best regards, Stefan