Re: any interest in tripwire commercial?

On Tue, Nov 30, 2010 at 7:01 AM, Michael Scheidell <scheidell@secnap.net> w=
rote:
> Any interest in Tripwire Commercial version?

Maybe

> I have a client who wants to allow their enterprise tripwire console to b=
e
> able to monitor the servers that do the real work (the freebsd servers) a=
s
> well as the token windows servers which are being monitored now.
>
> What version would you like to see it on? one of the .[135] versions for
> long life?
>
> 7.3? amd64? 8.1?

I tend to use the most current version that I have tested. (IE most
current) I generally use AMD64, but also i386.

> is i386 ok, as long as all the libraries exist?

Probably.

> does everyone put 32 bit compatibility libraries in their amd64 builds?
> ______

Never, unless running cosed source software. It seems to triple your
attack surface area.

You are vulnerable to 64bit exploits, 32bit exploits and exploits of
the translation layer.

Sort of lame of security software to increase your vulnerability.

________________________________________________________________
> This email has been scanned and certified safe by SpammerTrap(r). For
> Information please see http://www.secnap.com/products/spammertrap/
> ______________________________________________________________________
> =A0_______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.or=
g"
>
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"