--
AIDE (Advanced Intrusion Detection Environment) is a free replacement
for Tripwire. It does the same things as the semi-free Tripwire and
more.
What does it do?
It creates a database from the regular expression rules that it
finds from the config file. Once this database is initialized it
can be used to verify the integrity of the files. It has several
message digest algorithms (md5,sha1,rmd160,tiger,haval,etc.) that
are used to check the integrity of the file. More algorithms can
be added with relative ease. All of the usual file attributes can
also be checked for inconsistencies. It can read databases from
older or newer versions. See the manual pages within the distribution
for further info. There is also a beginning of a manual.
WWW: http://www.cs.tut.fi/~rammer/aide.html
- update MASTER_SITES
- add HOMEPAGE and @comment with RCS id to PLIST
- bump NEED_VERSION
>From ChangeLog:
o Forked version because the original maintainer was unreachable.
o Internal representation has now changed to utf-8 (XFree)
or locale-dependent multibyte (X).
o Font ressource is now .fontSet instead of .font.
o I/O is done using the current locale unless the -u (utf8)
switch is in effect.
- Correct a link in the navigation header.
- Avoid localizing @_ to make threaded Perl happy.
- Change "Previous Directory" to "Parent Directory".
- Properly HTML-quote function names in the colored diff view.
- Fixed a serious bug in Connection constructor when reading MySQL options
- Improved copy constructor and some other methods in Result / ResUse
- Many other minor improvements
- Produced a complete manual with chapter 5 included
- Updated documentation, including a Postscript format
add a -docs sub-package
From CHANGELOG
-- Added a whole bunch of new OS fingerprints (and adjustments)
ranging from big important ones (Linux 2.4.X, OpenBSD 2.9, FreeBSD
4.3, Cisco 12.2.1, MacOS X, etc) to some that are more obscure (
such as Apple Color LaserWriter 12/660 PS and VirtualAccess
LinxpeedPro 120 )
-- Added "All zeros" IP.ID sequence classification to account for the
new Linux 2.4 scheme which seems to use 0 whenever the DF bit is
set (probably a good idea).
-- Tweaked TCP Timestamp and IP.ID sequence classification algorithms
*) Fixed a format string bug which is exploitable if --batch is not used.
*) Checked all translations for format strings bugs.
*) Removed the Russian translation due to too many bugs.
*) Fixed keyserver access and expire time calculation.
ok maintainer