[Aide] best practice to initialization of the database and protection against manipulation
Django BOfH
django at nausch.org
Mon Nov 25 16:06:21 EET 2024
HI!
I am currently looking for an suitable replacement for Samhain for the following reasons, among others:
Segfault errors on individual machines when calling the program
Very limited support
Program maintenance and further development more than sluggish
... just to name a few.
In my search for alternatives, I stumbled across AIDE. As far as I could see so far, AIDE does not offer the option of signing the database created when determining the actual status of a host in order to ensure, for example, that the reference data with which the actual status is later compared has been manipulated. Or have I not understood something? Or, alternatively, how can you ensure that the database used as a reference during the check has not been manipulated?
I would be grateful for any tips!
Best regards
Django
More information about the Aide
mailing list