[Aide] best practice to initialization of the database and protection against manipulation

Django BOfH django at nausch.org
Mon Nov 25 16:06:21 EET 2024


HI!

I am currently looking for an suitable replacement for Samhain for the following reasons, among others:

Segfault errors on individual machines when calling the program
Very limited support
Program maintenance and further development more than sluggish

... just to name a few.


In my search for alternatives, I stumbled across AIDE. As far as I could see so far, AIDE does not offer the option of signing the database created when determining the actual status of a host in order to ensure, for example, that the reference data with which the actual status is later compared has been manipulated. Or have I not understood something? Or, alternatively, how can you ensure that the database used as a reference during the check has not been manipulated?


I would be grateful for any tips!


Best regards
Django


More information about the Aide mailing list