Re: [Devil-Linux-discuss] Updating to 1.2.11

[Dr. A. B. <be...@ec...>]

> Dick Middleton wrote:
> 
>    The recently added aide is broken.  It's obviously copied from 
> Debian and some needed parts don't exist (such as /var/lib/aide, 
> /etc/default, tempfile command and others).  That's all very well 
> except the script in /etc/cron.daily exists and fails.  Firstly it 
> fails because it doesn't have execute permission and secondly it 
> fails because programs and directories it references don't exist.
> 
>    The recently added awstats is also broken for a similar reason. 
>  The script in cron.daily doesn't have execute permissions. I've not 
> tried to run this but I notice various files with 1980 timestamps 
> such as the aforementioned and /etc/awstats/awstats.model.conf.

The time for test build/install/running/debug when the software is update is
not enough.

I added Aide and Awstats, in my personal distribution, about a year ago and
the inclusion in devil-linux is May.
Perhaps the Debian patch has modified something.
Today I sent script update (and work) to Heiko for inclusion in CVS and next
release.

Now, Awstats (awstats.sourceforge.net) is a log analizer and you MUST edit
configuration for YOUR system (my apache logs are in /chroot/var/lib/httpd and
your?) and awstats.model.conf is a template config.
Check http://econtools.economia.unife.it/devil-linux for other information.

ALL file in /etc are 1980 timestamps



> Whilst these are minor irritants it does bother me that things are 
> being added to the system without proper auditing.  This is supposed 
> to be a secure system and addition of unverified software obviously 
> gives an opportunity for malware to be unwittingly installed.
Untested maybe, unverified software ?!? for malware ?!?
Argh..... maybe Ubuntu installation has security problems!


Alberto

+--------------------------+
|   Dott. Alberto Benati   |
|   System Administrator   |
|   Faculty of Economics   |
|  University of  Ferrara  |
| be...@ec... |
|  Tel: +39 0532 45 5012   |
+--------------------------+