This is Debian/GNU Linux's prepackaged version of Gene Kim's and Eugene Spafford's Tripwire utility. Tripwire is a tool that aids system administrators and users in monitoring a designated set of files for any changes. Used with system files on a regular (e.g., daily) basis, Tripwire can notify system administrators of corrupted or tampered files, so damage control measures can be taken in a timely manner. This package was put together by me, Patrick Weemeeuw , from the sources which I obtained from ftp://ftp.belnet.be/pub/security/ftp.cert.dfn.de/ tools/admin/Tripwire/Tripwire-1.2.tar.gz . I have unpacked the archive, and have verified that the signature is from "Eugene H. Spafford ", as I have found it on a public PGP key archive (key ID FC0C02D5, on http://www-swiss.ai.mit.edu/~bal/pks-commands.html). However, I removed this signature from this distribution, as it applied to a tar archive, which does not fit very well into the Debian distribution scheme (including it would double the size of the package, as a largely redundant tar archive would be distributed too.). If you feel uneasy about this aspect (and there is no reason why you should trust me), then you should grab the original package yourself, verify its signature, unpack it and compare the sources with the sources of this Debianised distribution, and reinstall. The changes I made are as follows: - added support for the Debian package maintenance scheme, by adding various debian.* files - edited configs/conf-linux.h, include/config.h and src/config.pre.y for a clean compile under Debian Linux. These changes are only porting modifications, nothing has been changed to the algorithms. - added 'sleep 1' commands in various test scripts to slow these down in order to avoid some intermittent errors (I trust that the problems were caused by Tripwire that can not notice changes in modification time that are applied within one time tick from the creation of the original file). - edited configs/tw.conf.linux to fit a Debian setup. - 'make clobber' removes emacs backup files. - patched src/twdb_check.pl for perl version 5. Note however that it still cannot handle @@-constructs and blank lines in the configuration file. Hence you either have to edit your tw.config in order to run this script, or alternatively, you could reinitialise your database after configuration changes. Many changes were made by Michael Meskes. Also the original source is available from ftp://coast.cs.purdue.edu:/pub/COAST/Tripwire. The copyright notice of the original package: ## Gene Kim & Gene Spafford ## The COAST Project ## Department of Computer Sciences ## Purdue University ## ## All files in the distribution of Tripwire are Copyright 1992, 1993, 1994 ## by the Purdue Research Foundation of Purdue University. All rights ## reserved. Some individual files in this distribution may be covered ## by other copyrights, as noted in their embedded comments. ## ## Redistribution and use in source and binary forms are permitted ## provided that this entire copyright notice is duplicated in all such ## copies, and that any documentation, announcements, and other ## materials related to such distribution and use acknowledge that the ## software was developed at Purdue University, W. Lafayette, IN by ## Gene Kim and Eugene Spafford. No charge, other than an "at-cost" ## distribution fee, may be charged for copies, derivations, or ## distributions of this material without the express written consent ## of the copyright holder. Neither the name of the University nor the ## names of the authors may be used to endorse or promote products ## derived from this material without specific prior written ## permission. THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY ## EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE ## IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR ANY PARTICULAR ## PURPOSE.