Auditing Linux Boxes
Page 1 of 1

Author:  harner [ Tue Jan 16, 2007 5:50 am ]
Post subject:  Auditing Linux Boxes

I'd love to get more technical information about my Linux servers. In the not-so-distant future I am going to have to. I've been toying with the auditing script for Linux a little bit. All of my servers are either running OpenSUSE 10.1 or SLES9. I can audit Window machines just fine, however Linux is a little sketchy. Some machines can have their IP/Subnet detected, others cannot. "dpkg" has to be installed manually (via SMART package manager) and gives me this error: "dpkg-query: failed to open package info file `/var/lib/dpkg/available' for reading: No such file or directory"

Anyone have a fine-tuned audit script for SUSE?

Author:  mikeyrb [ Tue Jan 16, 2007 6:28 am ]
Post subject: 

Interesting. I'll have to look at the audit again, haven't for awhile. Dpkg is, to my knowledge, only useful on Debian-based systems. Suse systems should be using an rpm system, so we'll have to look into that. It's not too big an issue to just comment out the software detection, especially for servers under your control!

Author:  harner [ Tue Jan 16, 2007 6:33 am ]
Post subject: 

Making it work with YaST or even SMART if possible would be really kick ass. Eventually we'll have to audit the software for part of our SOX Compliance.

Open-AudIT does such a great job for our SOX auditors. The company I work for is gracious.

Author:  mikeyrb [ Tue Jan 16, 2007 6:36 am ]
Post subject: 

I think Ubuntu may be moving to smart soon, not sure. Either they're doing it or Debian upstream is, not sure. Good thing to look into.

Author:  Mark [ Tue Jan 16, 2007 1:05 pm ]
Post subject: 

I have a script here (somewhere) that will audit SuSe boxes OK. Will have to upload it.... Apologies for the delay.

Author:  harner [ Wed Jan 17, 2007 12:27 am ]
Post subject: 

Hey Mark. I am looking forward to getting it. Thanks

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group