backup - use rpm -V against backed-up database -


rpm(1) provides -v option verify installed files against installation database, can used detect modified or missing files. might used form of intrusion detection (or @ least part of audit). however, of course possible rpm database installed may modified hacker hide tracks (see http://www.sans.org/security-resources/idfaq/rpm.php, last sentence)

it looks should possible rpm database /var/lib/rpm after every install (to external medium) , use during audit using --dbpath. such backup have updated fo course after every install or upgrade etc.

is feasible? there resources detail methods, pitfalls, suggestions etc this?

yes feasible. use "rpm -va --dbpath /some/where/else" point saved database directory.

copy /var/lib/rpm/packages saved /some/where/else directory, , run "rpm --rebuilddb --dbpath /some/where/else" regenerate indices.

note can verify files using original packaging "rpm -vp some*.rpm" less hassle (and more secure ro offline media storing packages) saving copies of installed /var/lib/rpm/packages rpmdb.


Comments

Post a Comment

Popular posts from this blog

javascript - AngularJS custom datepicker directive -

i make custom datepicker directive custom template. but have no idea how start building it... how include date data directive? i appreciate guide or give me advice work on more precisely. it might you! follow below steps html code sample: <label>birth date</label> <input type="text" ng-model="birthdate" date-options="dateoptions" custom-datepicker/> <hr/> <pre>birthdate = {{birthdate}}</pre> <script type="text/ng-template" id="custom-datepicker.html"> <div class="enhanced-datepicker"> <div class="proxied-field-wrap"> <input type="text" ui-date-format="yy-mm-dd" ng-model="ngmodel" ui-date="dateoptions"/> </div> <label> <button class="btn" type="button"><i class="icon-calendar"></i>
Read more

javascript - jQuery date picker - Disable dates after the selection from the first date picker -

<!doctype html> <html lang="en"> <head> <meta charset="utf-8"> <title>jquery ui datepicker - default functionality</title> <link rel="stylesheet" href="//code.jquery.com/ui/1.11.4/themes/smoothness/jquery-ui.css"> <script src="//code.jquery.com/jquery-1.10.2.js"></script> <script src="//code.jquery.com/ui/1.11.4/jquery-ui.js"></script> <link rel="stylesheet" href="/resources/demos/style.css"> <script> $(function () { $("#datepicker1").datepicker(); }); </script> <script> $(function () { $("#datepicker2").datepicker(); }); </script> </head> <body> <p>date 1: <input type="text" id="datepicker1"></p> <p>date 2: <input type="t
Read more