LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-27-2007, 01:16 AM   #1
onlynimal
LQ Newbie
 
Registered: Apr 2006
Location: Chennai
Posts: 12

Rep: Reputation: 0
Question Files update in /etc


Does anybody got a list of files that are updated in /etc while booting linux.
thanx in advance
 
Old 08-27-2007, 01:41 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
You can easily do that yourself: stat and SHA1sum all items before you reboot, then stat and SHA1sum all items and compare after reboot. If that's not what you mean please explain and be verbose.
 
Old 08-28-2007, 06:53 AM   #3
WAJEDUR REHMAN
Member
 
Registered: Aug 2007
Posts: 43

Rep: Reputation: 15
If you wanna check file Integrity use tripwire
 
Old 08-28-2007, 11:47 AM   #4
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by WAJEDUR REHMAN View Post
If you wanna check file Integrity use tripwire
Even though the OP doesn't mention anything about wanting to do integrity checking, that is indeed one of the times when one would need to know the answer to what he is asking. When setting Tripwire policies you typically need to make sure files like /etc/mtab, which are updated at boot, won't generate false alarms.

That said, running your check you'd see *exactly* what has changed and how, so you could tweak your policy on your own - without having to ask. That makes me suspect the question isn't about integrity checking. But then again, as has been said by unSpawn, we need more verbosity in order to truly understand the reasons for this question.

Furthermore, unSpawn's suggestion of doing checksums before and after boot and then diffing the results would provide the OP with the answer to his question regardless of whether he uses Tripwire or not. My guess is that the OP is looking for some sort of "official list" of files that change or something of that nature. We'll know more when he posts again.

Last edited by win32sux; 08-28-2007 at 11:51 AM.
 
Old 08-29-2007, 02:50 AM   #5
WAJEDUR REHMAN
Member
 
Registered: Aug 2007
Posts: 43

Rep: Reputation: 15
I Agree
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unable to update files paddy Linux - Newbie 3 01-05-2006 07:38 AM
How to backup the update files ste85 Linux - Software 3 06-26-2005 09:32 PM
Online Update files fireedo SUSE / openSUSE 7 05-09-2005 02:11 PM
How to use update cd iso files ? marsim Debian 1 11-06-2004 06:49 AM
Files disappeared after update mikelds Linux - Newbie 4 05-11-2004 04:19 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 10:37 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration