tripwire-dev — Discussion list for development of open source tripwire

[Tripwire-dev] bsd patch...

[Ron F. <rj...@sk...>]

Paul, there is something a little hairy about that patch -- it mostly
applies okay, but refuses to create any new files you have included,
namely the .inc files in make_include.

I am gonna extract those by hand and apply them, then tar the whole
mess up and send to you to make sure it still builds/tests okay on
bsd.

I builds and tests fine here on linux after applying...

thanks
rjf&

Re: [Tripwire-dev] FreeBSD patch, hold the STLport upgrade

[Paul H. <ph...@fr...>]

On Thu, 8 Feb 2001, Ron Forrester wrote:

> thinking about removing STLport all together and just providing a
> link to the stlport site. Not sure. Opinions are welcome.

I must say, I'm not in love with it either, and I would not be the
least bit upset if it were wished away to the cornfield.  In fact,
long term, I don't even think it needs to be there.  Tripwire doesn't
(directly) use even half the library.  A nice project would be to ween
tripwire off of STLport.

Yes, I think its days are numbered.

However, until then, I think it needs to stay.  I think if tripwire
can't find an existing STLport library on the system, it should
compile its own.  You gotta admit, STLport is not quite standard
issue.  It'd be a different story if it were something like libpcap or
libncurses...

Besides, we don't want people to go around installing STLport on all
their machines now, do we?  <removes toungue from cheek>  ;-)

-Paul.

Re: [Tripwire-dev] FreeBSD patch, hold the STLport upgrade

[Ron F. <rj...@sk...>]

On Fri, Feb 09, 2001 at 12:36:01AM +0100, Paul Herman wrote:
> Anyway, your's to test.  Feedback welcome.  Have fun!

Sweet. I am screwing with CVS on sourceforge currently -- thinking
about removing STLport all together and just providing a link to the
stlport site. Not sure. Opinions are welcome.

At anyrate, I will probably get your changes into CVS sometime in the
next week.

Thanks much Paul. 
rjf&

[Tripwire-dev] FreeBSD patch, hold the STLport upgrade

[Paul H. <ph...@fr...>]

Hi,

After a short chat with Ron, I managed to come up with a revised patch
against tripwire-2.3.0-src so that it compiles & links under FreeBSD
(and almost OpenBSD.)  I needed to add some small OS checks, and while
I was there I fixed a few small -Wall errors.

But... Beware!  This does not include the STLport merge from my
original patchset which fixed some pthread issues, so this will still
produce broken code on FreeBSD (all executables will coredump upon
exit.)  I strongly recommend upgrading the STLport to 4.0 release,
which runs great under both Linux and FreeBSD.

Anyway, your's to test.  Feedback welcome.  Have fun!

-Paul.

[Tripwire-dev] CVS is currently hosed

[Ron F. <rj...@sk...>]

I am moving/deleting some stuff -- will send another email as soon as
it is working again.

rjf&

[Tripwire-dev] 2.3.0-50 just dropped...

[Ron F. <rj...@sk...>]

I just updated CVS with my first batch of changes, and uploaded a new
src tarball to the files section.

See ChangeLog in the tarball or CVS to see a list of what I changed.

rjf&

[Tripwire-dev] current status

[Ron F. <rj...@sk...>]

Contrary to how quiet it's been here lately, I have been working on
the code a bit here and there. Here is what's coming up:

- a small security enhancement recommended by Jarno (thanks!)  -- that
is, opening up our temp files with O_EXCL to make sure they don't
already exist.

- an additional security feature inherited from the commercial side of
things: a new configuration variable called TEMPDIRECTORY. This can be
set to a directory for which you (root) have full control of for
permissions, unlike /tmp.

- Another new configuration variable inherited from the commercial
side called GLOBALEMAIL. This variable can be set to a list of email
addresses, and anytime a report would normally be emailed, it will
also be emailed to the recipients specified by this variable. This
allows you to setup one or more people to always get a report.

- Possibly, I will add some access rights code, again from commerical,
which allows specification via config variables, of the default
creation permissions for reports, databases, keys and configuration
file.

I hope to check this code in sometime next week.

Additionally, if you all haven't seen the new documentation
(end-user), head to the sourceforge tripwire page and visit the file
downloads. It's quite good.

Anyone else up to anything interesting?
rjf&

Re: [Tripwire-dev] Happy Turkey Day

[Ron F. <rj...@sk...>]

On Fri, Nov 24, 2000 at 10:43:48AM -0500, Henry Zektser wrote:
> To those who partake, I hope you've all had a happy Thanksgiving.

Hope you had a great one Henry...

rjf&

[Tripwire-dev] Happy Turkey Day

[Henry Z. <kde...@ho...>]

To those who partake, I hope you've all had a happy Thanksgiving.

H
_____________________________________________________________________________________
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com

Re: [Tripwire-dev] trippy screenshot

[Henry Z. <kde...@ho...>]

Yeah, I'm going to make it english-able, I was just doing a straight map for 
now, because I'm not totally sure about all the variables (ROOT for one 
still has me baffled, whats it do?). Thats eye candy tho, I'm still stuck on 
functionality;P As far as the output, it's going to be a separate class 
called TWCfgWriter that will make that easy.

H


>From: mat...@ho...
>To: Henry Zektser <kde...@ho...>
>Subject: Re: [Tripwire-dev] trippy screenshot
>Date: Mon, 20 Nov 2000 19:32:04 +0000 (UTC)
>
>
>Okay.  Just a thought, but on the tripwire options page, you might want to
>just put the options in english statements that aren't all concatenated
>together.  After all, if they are using this tool, it is to make there
>life easier, and so they shouldn't have to sit there a minute or two
>playing word games to figure, what is this option saying again?  You can
>always do the translation afterwards in the code.  Looks like it will be
>interesting.  (Just for future consideration, you might want to make the
>output from the program modular enough so that if the tripwire
>configuration file moves to something like XML, it doesn't give you a
>horrid time.)  Cool Stuff.
>
>Matthew M. Copeland
>
>
>
>
>On Mon, 20 Nov 2000, Henry Zektser wrote:
>
> > After alot of work on getting tripwire working (thanks Ron), I've 
>finally
> > got something to show for all of the effort. I'm putting up a screenshot
> > (well, 3 of them) of QTWCfgEditor (a Qt widget). It's, well, a config 
>editor
> > for tripwire:) Not much functionality in the editor itself yet, but the
> > widget is finished (has get/set for all of the fields, and all that good
> > stuff). I'm having major issues with sourceforge (I think I'm too stupid 
>to
> > use it), so the screenshot is going up at
> > http://elcongroup.com/qtwcfgedit.gif... Please let me know what you all
> > think. This is where trippy is headed as far as the report viewer/policy
> > editor/etc. Theres also going to be a java version of all this stuff, 
>but
> > for the time being, Qt with windows (if I can find a cd of Qt for 
>windows)
> > and linux binaries. Anyway, just a little update for you all, and some 
>proof
> > that I am not, contrary to popular belief, dead.
> >
> > H
> > 
>_________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at 
>http://www.hotmail.com.
> >
> > Share information about yourself, create your own public profile at
> > http://profiles.msn.com.
> >
> > _______________________________________________
> > Tripwire-dev mailing list
> > Tri...@li...
> > http://lists.sourceforge.net/mailman/listinfo/tripwire-dev
> >
>

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

[Tripwire-dev] trippy screenshot

[Henry Z. <kde...@ho...>]

After alot of work on getting tripwire working (thanks Ron), I've finally 
got something to show for all of the effort. I'm putting up a screenshot 
(well, 3 of them) of QTWCfgEditor (a Qt widget). It's, well, a config editor 
for tripwire:) Not much functionality in the editor itself yet, but the 
widget is finished (has get/set for all of the fields, and all that good 
stuff). I'm having major issues with sourceforge (I think I'm too stupid to 
use it), so the screenshot is going up at 
http://elcongroup.com/qtwcfgedit.gif... Please let me know what you all 
think. This is where trippy is headed as far as the report viewer/policy 
editor/etc. Theres also going to be a java version of all this stuff, but 
for the time being, Qt with windows (if I can find a cd of Qt for windows) 
and linux binaries. Anyway, just a little update for you all, and some proof 
that I am not, contrary to popular belief, dead.

H
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

RE: [Tripwire-dev] crafting better policy files - wildcards?

[Ron F. <ro...@tr...>]

Sounds good. Tripwire is moving to a new office starting today, so I will be
out of touch until at best Monday, although I expect there to be some minor
problems Monday as well.

Have a great weekend, look forward to checking out Trippy...

rjf&

> -----Original Message-----
> From: Henry Zektser [mailto:kde...@ho...]
> Sent: Friday, November 17, 2000 9:13 AM
> To: tri...@li...
> Subject: Re: [Tripwire-dev] crafting better policy files - wildcards?
> 
> 
> Sorry I've been out of touch, been setting up Qt 2.2.2 so I 
> can work on 
> trippy. I've actually got a working config file editor now, 
> yay! CVS code 
> coming soon. Anyways, your idea seems great. In fact, the 
> overhead of that 
> would be trivial. Just add a shell-out to a perl script that 
> blows up the 
> regexp to the -m i code, and you're all set..
> I.E. have tripwire -m i call something like
> mv /etc/tripwire/twpol.txt /etc/tripwire/twpol.txt.org
> blowup.pl /etc/tripwire/twpol.txt.org /etc/tripwire/twpol.txt
> and then continue on. Ofcourse twpol.txt and /etc/tripwire 
> would change
> based on the params.
> 
> H
> 
> 
> >From: Ron Forrester <ro...@tr...>
> >To: "Tripwire-Dev (E-mail)" <tri...@li...>
> >Subject: [Tripwire-dev] crafting better policy files - wildcards?
> >Date: Wed, 15 Nov 2000 14:21:30 -0800
> >
> >
> >I just realized I would really rather carry these dicussions 
> on with the
> >mailing list as opposed to the forum...
> >
> >So, as to the idea of using comments to manage the change 
> from regex's to
> >expanded rules. It is certainly workable, but not ideal. If 
> you change one
> >or two of the regex's, you also have to delete all the 
> expanded rules 
> >before
> >running it through expansion again.
> >
> >It seems to me, reasonable solution would be one where tripwire could
> >properly use the policy file with regex's intact. To do 
> this, it seems
> >tripwire would need to create an additional working file 
> upon database 
> >init.
> >This working file would basically be the policy file with 
> regex's expanded
> >-- when integrity checks were run, this version of the 
> policy file would be
> >used since it would have the rules as they expanded at 
> dbinit or policy
> >update time. This file would get recreated upon a new db 
> init or policy
> >update (I think). This way, the original policy file stays 
> in the original
> >form, and is used only to create this secondary representation.
> >
> >Thoughts, comments?
> >cheers,
> >rjf&
> >
> > > -----Original Message-----
> > > From: no...@so... [mailto:no...@so...]
> > > Sent: Wednesday, November 15, 2000 2:08 PM
> > > To: no...@so...
> > > Subject: [tripwire - Open Discussion] RE: crafting better
> > > policy files -
> > > wildcards?
> > >
> > >
> > > Read and respond to this message at:
> > > http://sourceforge.net/forum/message.php?msg_id=75540
> > > By: japhar81
> > >
> > > Alright, how about this:
> > > Trippy goes through, comments out the regexp with a lovely #,
> > > and inserts the
> > > exploded list, I.E.
> > > /usr/sbin//somexp//
> > > becomes:
> > > # /usr/sbin//somexp//
> > > # Trippy Explode Here
> > > /usr/sbin/file1
> > > /usr/sbin/file2
> > > /usr/sbin/file3
> > > # Trippy Explode End
> > >
> > > 
> ______________________________________________________________________
> > > You are receiving this email because you elected to monitor
> > > this forum.
> > > To stop monitoring this forum, login to SourceForge and visit:
> > > http://sourceforge.net/forum/monitor.php?forum_id=9175
> > >
> 
> ______________________________________________________________
> ___________
> Get Your Private, Free E-mail from MSN Hotmail at 
http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

_______________________________________________
Tripwire-dev mailing list
Tri...@li...
http://lists.sourceforge.net/mailman/listinfo/tripwire-dev

Re: [Tripwire-dev] crafting better policy files - wildcards?

[Henry Z. <kde...@ho...>]

Sorry I've been out of touch, been setting up Qt 2.2.2 so I can work on 
trippy. I've actually got a working config file editor now, yay! CVS code 
coming soon. Anyways, your idea seems great. In fact, the overhead of that 
would be trivial. Just add a shell-out to a perl script that blows up the 
regexp to the -m i code, and you're all set..
I.E. have tripwire -m i call something like
mv /etc/tripwire/twpol.txt /etc/tripwire/twpol.txt.org
blowup.pl /etc/tripwire/twpol.txt.org /etc/tripwire/twpol.txt
and then continue on. Ofcourse twpol.txt and /etc/tripwire would change
based on the params.

H


>From: Ron Forrester <ro...@tr...>
>To: "Tripwire-Dev (E-mail)" <tri...@li...>
>Subject: [Tripwire-dev] crafting better policy files - wildcards?
>Date: Wed, 15 Nov 2000 14:21:30 -0800
>
>
>I just realized I would really rather carry these dicussions on with the
>mailing list as opposed to the forum...
>
>So, as to the idea of using comments to manage the change from regex's to
>expanded rules. It is certainly workable, but not ideal. If you change one
>or two of the regex's, you also have to delete all the expanded rules 
>before
>running it through expansion again.
>
>It seems to me, reasonable solution would be one where tripwire could
>properly use the policy file with regex's intact. To do this, it seems
>tripwire would need to create an additional working file upon database 
>init.
>This working file would basically be the policy file with regex's expanded
>-- when integrity checks were run, this version of the policy file would be
>used since it would have the rules as they expanded at dbinit or policy
>update time. This file would get recreated upon a new db init or policy
>update (I think). This way, the original policy file stays in the original
>form, and is used only to create this secondary representation.
>
>Thoughts, comments?
>cheers,
>rjf&
>
> > -----Original Message-----
> > From: no...@so... [mailto:no...@so...]
> > Sent: Wednesday, November 15, 2000 2:08 PM
> > To: no...@so...
> > Subject: [tripwire - Open Discussion] RE: crafting better
> > policy files -
> > wildcards?
> >
> >
> > Read and respond to this message at:
> > http://sourceforge.net/forum/message.php?msg_id=75540
> > By: japhar81
> >
> > Alright, how about this:
> > Trippy goes through, comments out the regexp with a lovely #,
> > and inserts the
> > exploded list, I.E.
> > /usr/sbin//somexp//
> > becomes:
> > # /usr/sbin//somexp//
> > # Trippy Explode Here
> > /usr/sbin/file1
> > /usr/sbin/file2
> > /usr/sbin/file3
> > # Trippy Explode End
> >
> > ______________________________________________________________________
> > You are receiving this email because you elected to monitor
> > this forum.
> > To stop monitoring this forum, login to SourceForge and visit:
> > http://sourceforge.net/forum/monitor.php?forum_id=9175
> >

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

[Tripwire-dev] crafting better policy files - wildcards?

[Ron F. <ro...@tr...>]

I just realized I would really rather carry these dicussions on with the
mailing list as opposed to the forum...

So, as to the idea of using comments to manage the change from regex's to
expanded rules. It is certainly workable, but not ideal. If you change one
or two of the regex's, you also have to delete all the expanded rules before
running it through expansion again.

It seems to me, reasonable solution would be one where tripwire could
properly use the policy file with regex's intact. To do this, it seems
tripwire would need to create an additional working file upon database init.
This working file would basically be the policy file with regex's expanded
-- when integrity checks were run, this version of the policy file would be
used since it would have the rules as they expanded at dbinit or policy
update time. This file would get recreated upon a new db init or policy
update (I think). This way, the original policy file stays in the original
form, and is used only to create this secondary representation.

Thoughts, comments?
cheers,
rjf&

> -----Original Message-----
> From: no...@so... [mailto:no...@so...]
> Sent: Wednesday, November 15, 2000 2:08 PM
> To: no...@so...
> Subject: [tripwire - Open Discussion] RE: crafting better 
> policy files -
> wildcards?
> 
> 
> Read and respond to this message at: 
> http://sourceforge.net/forum/message.php?msg_id=75540
> By: japhar81
> 
> Alright, how about this:
> Trippy goes through, comments out the regexp with a lovely #, 
> and inserts the
> exploded list, I.E.
> /usr/sbin//somexp//
> becomes:
> # /usr/sbin//somexp//
> # Trippy Explode Here
> /usr/sbin/file1
> /usr/sbin/file2
> /usr/sbin/file3
> # Trippy Explode End
> 
> ______________________________________________________________________
> You are receiving this email because you elected to monitor 
> this forum.
> To stop monitoring this forum, login to SourceForge and visit: 
> http://sourceforge.net/forum/monitor.php?forum_id=9175
> 

[Tripwire-dev] GUI GUI Goodness

[Henry Z. <kde...@ho...>]

I submitted a request to sourceforge yesterday to start a project to develop 
a GUI for setup, deployment, and day-to-day use of tripwire 
(cross-platform). I'm still waiting to hear on it, but I believe it will be 
approved. Any developers interesting in this, please drop me a line 
(kde...@ho...).

Henry
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

[Tripwire-dev] IRC

[Ron F. <rj...@sk...>]

IRC can be a pretty cool tool for a disperse group of people working
on a project, and it is something I have wanted to get going for the
tripwire project.

It will be a few weeks before I can get a box setup here to host that,
so until then I would like to propose we use the OpenProjects IRC
network. The list of servers they have is here:

   http://openprojects.nu/services/irc.html

Joining a channel on any of those servers automatically puts you on a
channel on all of those servers, so it shouldn't matter which one you
use, pick one close to you.

I will hang out in "#ost" as 'rjf' should anyone want to chat about
the project, ask questions, etc. Let me know if you have any questions
about this.

cheers,
rjf&

Re: [Tripwire-dev] coding and stuff

[Ron F. <rj...@sk...>]

On Tue, Nov 07, 2000 at 10:01:59PM +0000, Henry Zektser wrote:
> 1) Can we actually do stuff to the cvs code yet? I'm going to be
> ready to code tonight (my floppy drive for my laptop is coming in).

Currently only I have write access to cvs. It is my intention to
manage the project somewhat traditionally...

By that I mean, most projects start out with some core developer who
has write access -- people submit patches which get integrated into
cvs by the core developer, or rejected, etc.. As a particular
contributor becomes more active he or she would probably gain write
access to cvs.

So I would ask, does that make sense? (this is my first time at this).

> 2) GUI, GUI, GUI. Web, Windows, Qt, whatever, we need to do GUI. I'm
> wondering if we should perhaps split off a group independent of the
> main tripwire program to code up various GUIs (specifically, web,
> native linux,

Well now, we are talking a whole different ball game here. While I
would be interested in supporting developers on a project like this, I
don't think it is appropriate to live in the tripwire cvs or
sourceforge project page. It is better as a separate sourceforge
project, and I will be happy to work with the other project to make
things progress in a meaningful manner.

Does that make sense?

cheers,
rjf&

[Tripwire-dev] coding and stuff

[Henry Z. <kde...@ho...>]

Two things...
1) Can we actually do stuff to the cvs code yet? I'm going to be ready to 
code tonight (my floppy drive for my laptop is coming in).
2) GUI, GUI, GUI. Web, Windows, Qt, whatever, we need to do GUI. I'm 
wondering if we should perhaps split off a group independent of the main 
tripwire program to code up various GUIs (specifically, web, native linux, 
and windows hooking into the linux box to config it). Something on the level 
of Oracle's enterprise manager. Ron, since you guys own this stuff, what do 
you think? Can we get away with a separate group, and will tripwire support 
us?

H
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

Re: [Tripwire-dev] NDAs and design docs

[Henry Z. <kde...@ho...>]

Well, I tend to write alot of code between compiles, and even more between 
test runs. So my thought was, write at work, build at work (NT-shop, no 
linux), and then test at home. But I have a spifty Dell Lattitude that I'm 
gonna use exclusively for trippin. Just a curiousity question. By the way, 
when are you gpl'ing the windows code? ;P

H


>From: Ron Forrester <rj...@sk...>
>To: tri...@li...
>Subject: Re: [Tripwire-dev] NDAs and design docs
>Date: Mon, 6 Nov 2000 10:25:16 -0800
>
>On Mon, Nov 06, 2000 at 04:49:11PM +0000, Henry Zektser wrote:
> > 1) Can we just send to the list instead of each-other with CC's? I'm
> > starting to get a headache trying to keep up with the duped emails,
> > since I get both list and the one I'm addressed/CCd on. Or is there
> > a reason for doing that? Just a thought.
>
>Probably my bad -- I have been hitting "group reply" in mutt and it
>grabs everyone...
>
> > 2) Do we have any options as far as developing on windows and
> > running on linux? I'm trying to coax cygwin into building tripwire,
> > but I need gmake right now, so I'm gonna snag and attempt to install
> > that. Just curious if your developers have any ideas on this. Again,
> > just my .02c.
>
>I have not done anything with tripwire and cygwin -- however, it's my
>understanding that cygwin creates win32 binaries, so unless you are
>talking about some kind of cross compiling scenario, I don't think it
>will work.
>
>cheers,
>rjf&
>_______________________________________________
>Tripwire-dev mailing list
>Tri...@li...
>http://lists.sourceforge.net/mailman/listinfo/tripwire-dev

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

Re: [Tripwire-dev] NDAs and design docs

[Ron F. <rj...@sk...>]

On Mon, Nov 06, 2000 at 04:49:11PM +0000, Henry Zektser wrote:
> 1) Can we just send to the list instead of each-other with CC's? I'm
> starting to get a headache trying to keep up with the duped emails,
> since I get both list and the one I'm addressed/CCd on. Or is there
> a reason for doing that? Just a thought.

Probably my bad -- I have been hitting "group reply" in mutt and it
grabs everyone...

> 2) Do we have any options as far as developing on windows and
> running on linux? I'm trying to coax cygwin into building tripwire,
> but I need gmake right now, so I'm gonna snag and attempt to install
> that. Just curious if your developers have any ideas on this. Again,
> just my .02c.

I have not done anything with tripwire and cygwin -- however, it's my
understanding that cygwin creates win32 binaries, so unless you are
talking about some kind of cross compiling scenario, I don't think it
will work.

cheers,
rjf&

Re: [Tripwire-dev] NDAs and design docs

[Matthew C. <mat...@de...>]

> Thanks Ron,
> Two more misc. rants here:
> 1) Can we just send to the list instead of each-other with CC's? I'm 
> starting to get a headache trying to keep up with the duped emails, since I 
> get both list and the one I'm addressed/CCd on. Or is there a reason for 
> doing that? Just a thought.
This should be an option within the mailing list software to change/play
with the reply to address mangling.


> 2) Do we have any options as far as developing on windows and running on 
> linux? I'm trying to coax cygwin into building tripwire, but I need gmake 
> right now, so I'm gonna snag and attempt to install that. Just curious if 
> your developers have any ideas on this. Again, just my .02c.

gmake should compile.  (If I remember correctly.)   The problem that you
will run into, is lack of other features within th e libraries.  Last time
I tried, I had to add things like SIG_IGNORE, and fix some other things to
get some stuff to compile.


Matthew M. Copeland

Re: [Tripwire-dev] NDAs and design docs

[Henry Z. <kde...@ho...>]

Thanks Ron,
Two more misc. rants here:
1) Can we just send to the list instead of each-other with CC's? I'm 
starting to get a headache trying to keep up with the duped emails, since I 
get both list and the one I'm addressed/CCd on. Or is there a reason for 
doing that? Just a thought.
2) Do we have any options as far as developing on windows and running on 
linux? I'm trying to coax cygwin into building tripwire, but I need gmake 
right now, so I'm gonna snag and attempt to install that. Just curious if 
your developers have any ideas on this. Again, just my .02c.

H


>From: Ron Forrester <rj...@sk...>
>To: Henry Zektser <kde...@ho...>
>CC: tri...@li...
>Subject: Re: [Tripwire-dev] NDAs and design docs
>Date: Mon, 6 Nov 2000 08:39:43 -0800
>
>On Mon, Nov 06, 2000 at 01:12:04PM +0000, Henry Zektser wrote:
> > actually created;) Would it be possible for us to get a hold of these, 
>even
> > if it did require an NDA or something? Maybe not released to everyone on 
>the
> > project, but a few 'key' individuals who could guide the rest?
>
>Henry, let me see what I can dig up -- even if I can't release stuff
>we already have, I can whip up something new that will at least give
>some high level details and places to start.
>
>cheers,
>rjf&

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

Re: [Tripwire-dev] NDAs and design docs

[Ron F. <rj...@sk...>]

On Mon, Nov 06, 2000 at 01:12:04PM +0000, Henry Zektser wrote:
> actually created;) Would it be possible for us to get a hold of these, even 
> if it did require an NDA or something? Maybe not released to everyone on the 
> project, but a few 'key' individuals who could guide the rest?

Henry, let me see what I can dig up -- even if I can't release stuff
we already have, I can whip up something new that will at least give
some high level details and places to start.

cheers,
rjf&

[Tripwire-dev] NDAs and design docs

[Henry Z. <kde...@ho...>]

Ron,
Since we're on this legal talk here, I just thought I'd bring something up. 
It would be very helpful for those of us hacking at the code to get a 
glimpse at the original design docs, which I hope and pray your developers 
actually created;) Would it be possible for us to get a hold of these, even 
if it did require an NDA or something? Maybe not released to everyone on the 
project, but a few 'key' individuals who could guide the rest?

H
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

Re: [Tripwire-dev] A quick note about participation

[Henry Z. <kde...@ho...>]

I don't see this as a huge problem, provided that the code does get 
re-released. In effect, we don't license the code at all, we transfer 
ownership to tripwire, who do the confusing dual-license stuff that we don't 
really want to deal with anyway;)

H


>From: Ron Forrester <rj...@sk...>
>To: Henry Zektser <kde...@ho...>
>CC: tri...@li...
>Subject: Re: [Tripwire-dev] A quick note about participation
>Date: Sun, 5 Nov 2000 12:02:59 -0800
>
>On Sun, Nov 05, 2000 at 07:46:35PM +0000, Henry Zektser wrote:
> > as long as we, as the OSS community, are protected in some way from
> > tripwire saying 'shit, this is too cool to GPL, we'll just keep it
> > cuz we have a
>
>If it gets accepted by me for CVS, that'll never happen, or, let's
>just say I'd be moving on... So you have my word that will never
>happen while I work there.
>
>The main purpose is to allow dual licensing -- any copyright
>assignment document approved by me and used while I am gatekeeper will
>be a contract that says a) the author assigns full copyright to
>tripwire, and b) tripwire promises to re-license the code under at
>_least_ the GPL, while reserving the right to also release under a
>tripwire license.
>
>Hope this is clear. This is a very important issue to me and I want to
>make sure it comes out right.
>
>rjf&
>
>_______________________________________________
>Tripwire-dev mailing list
>Tri...@li...
>http://lists.sourceforge.net/mailman/listinfo/tripwire-dev

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.