Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'Install and tweak the Checkmate tripwire' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Install and tweak the Checkmate tripwire
Authored by: pknull on Apr 11, '05 03:20:43PM
It might be noted, that, depending on the version of OS X you're running, not all files in the updated plist, will be found in your system. I'm curious as to what other system files people may have added to this, and if different files should be regularly checked depending on the OS version you are running... It's neat to read things on one site, and then a day or two later, read a similar hint on another. It's like watching waves of information wash over the community.

[ Reply to This | # ]
Install and tweak the Checkmate tripwire
Authored by: PurpleHaze on Apr 11, '05 05:16:11PM

identd is no longer installed in Panther, and is in the default plist - so if you leave it in, it will throw an error.
I have audit installed (part of Apple's Common Criteria Tools) so I checksum those binaries too, plus the binaries that make up Keychain Access and a few others.
Oh - it's me who's posting this tutorial around - I'm on a one-man mission to promote the use of tripwires, before the platform gets hit by its first serious malware. I really, really hope Brian Hill considers releasing Chekcmate under GPL.



[ Reply to This | # ]