On Sun, 16 Jan 2000, David Walluck wrote:
> WH Bouterse wrote:
> >
> > David! You said,
> >
> > >It's because of msec I believe.. may have been the SysVinit
> > >package too.
> > >find is searching for modified files.... which could indicate
> > >files with
> > >a trojan in them... personally i hate it, which is why i do
> > >custom...
> >
> > I was interested in your comment about
> > 'find' and 'custom'.
> > I assume you mean the /etc/security/msec/init-sh/custom.sh?
>
> I meant "/etc/security/msec/init.sh custom", which runs the custom.sh.
> If you choose a security leael from the GUI tool, that will undo your
> custom settings, but if you set it, and run custom afterwards, you will
> have your custom settings.
cooker -> air = not supported
oxygen -> air = insane
air -> air = even more insane
In other words quit doing that ;) but on to the more serious,
Pixel, how _does_ it handle the SECURE_LEVEL currently?
> As for the find, those are the "Do you want me to check for xxx files?"
> questions, which you have to answer no to if you don't want those checks
> to run constantly. Does anacron and crond conflict or can I have both
> running? I don't know.. all I notice is that these finds seem to run way
> to often (more than once a day).
during the first few it was every hour, then 6hrs, I'm not sure off hand
if it depends on the level in the one shipped with 7.0 if it doesn't it's
set for 24hrs. Do you have both crond anacron installed :/
> > Or in fact do you mean by 'custom' a custom firewall/ipchains/tripwire
> > kind of setup?
> > I have been running a Tripwire rpm successfully with 6.1 which
> > installed flawlessly and worked right from thestart but have not
> > tried it with 7.0 until more "kinks" get worked out on my 7.0 system.
> >
> > So to any MandrakeSoft folks who might read this;
> > Does msec make something like Tripwire redundant?
no it doesn't, you can never be to secure. also keep an eye out for
prelude too ;)
> No, I meant your first guess. msec doesn't do any firewall things, but
> it would be great if it did in a future version. I have been looking for
> a firewall setup tool that is easy to use. If I do it by hand I always
> end up blocking too much.
still planed (yeah yeah, i know I'm a "lazy sob"), I'll do some digging
and seee if i can avoid starting from scratch, again.. (I also tend to
loose things ;)
> > Thanks to All
> >
> > William Bouterse
> > Juneau Alaska
>
>
--
MandrakeSoft http://www.mandrakesoft.com/
--Axalon
