What is the alternate RPM available with RHEL 4/5 for TripWire
 

Geeks,

I want to know , what is the alternate tool available for Tripwire. Redhat stop Tripwire included from RHEL3 itself. Can someone Let me know, Which one will be the alternate for Tripwire for PRODUCTION environments.

As far as I know tripwire had some licensing problems in the past and the development of the "free" version was stopped years ago. There are a few options if you want to stay with tripwire: (rebuild and) run the RHEL-3 version, search for, rebuild and run the version found in Fedora or CentOS repos or search Pbone or the 'net for RPMs other repos provide.

If you want to choose another HIDS then check out the LQ FAQ: Security references, post #5 down at "File Integrity Detection Systems" and you'll find Aide, Samhain, Osiris, OSSEC HIDS.

Also see related threads in the Linux Security forum that discuss (and should make you think about) which HIDS to use for which situation, like:

Which are some really good file integrity checking programs?,
Question about AIDE or other file integrity checking software,
what can or can't OSSEC do compare to samhain?
Protecting my HIDS databases and
What is the best way to handle the aide database?

Hi, have you done a search with http://rpm.pbone.net It seems to be available for mandriva, which has a similar file system to RH...

If not it is also available as a src.rpm file where you may configure it yourself like you would with a tar ball.

see how you go.

regards, Glenn

<edit> I see, maybe you do not want to contravene the license, I spoke too soon. The package is available for red hat</edit>