Download Guideline on Network Security Testing

DRAFT GUIDE TO NETWORK SELF-TEST
!
Inode number in the file system
!
Number of links
!
User ID of the owner
!
Group ID of the group of users to which access may be granted
!
Size of the item
!
Date and time the item was last accessed, the last modification made to the item,
and the creation date and time associated with the item's inode.
For most systems the administrator should configure Tripwire to verify the integrity of all
critical operating system directories and files, plus any other directories and files that the
administrator considers sensitive. Administrators should pay particular attention to executable programs, daemons, scripts, and the libraries and configuration files associated with
them.
The default Tripwire configuration file for most operating systems is adequate, but administrators should carefully review and edit this file to reflect their particular requirements.
When choosing which attributes of files and directories to verify, administrators should consider how files and directories are configured on their system. For example log files change
as events cause records to be written, so verifying the constancy of the file size for these
files is not generally useful. However, monitoring changes to the size of system binaries or
to access permissions for log files is usually warranted.
The install process will itemize the steps required to install Tripwire on Unix and Linux systems. It will not cover Windows based systems although the install is relatively easy under
Windows when using Tripwire’s install program. Before downloading an installing Tripwire, administrators should confirm that the host(s) they are installing Tripwire on include
the following software applications:
!
An MD5 cryptographic checksum program
!
GZIP to uncompress the downloaded file
!
PGP to verify the authenticity of the software distribution
!
A C compiler.
Download or purchase (as appropriate) Tripwire from http://www.tripwiresecurity.com/.
Once Tripwire is downloaded verify the MD5 Checksum.
Installing Tripwire on UNIX
Choose a storage location with sufficient space for the Tripwire distribution. Consult the
Tripwire user manual before attempting installation. It contains trouble-shooting suggestions
and additional details that are beyond the scope of this implementation.
After downloading Tripwire it will be necessary to unzip it:
$ gunzip Tripwire-1_3_1-1_tar.gz
To unpack the Tripwire distribution, use the system tar command:
$ tar xvf Tripwire-1.3.1-1_tar
This command creates a subdirectory named tw_ASR_1.3.1_src. Perform all operations
54