bsm
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 2
Snare 1.2
Snare is an audit subsystem for Linux. more>>
SNARE (System iNtrusion Analysis and Reporting Environment) is a kernel patch, daemon, and Gnome2 GUI, that together provide a host intrusion detection facility and C2-style auditing/event logging capability for Linux similar to the Basic Security Module (BSM) for Solaris, or the Windows Event Log.
SNARE is divided into three key components:
The Kernel changes
In order to collect event log data, Snare needs to add auditing support into the operating system. You can choose to either install a binary version of the kernel, with Snare already integrated, or you can apply a patch to your kernel source.
Although we try hard to make Snare as easy to install as possible, there are hundreds of different distributions and kernel versions, and it would be an immense task to build Snare for each variant. We are hoping that recent efforts towards creating a native auditing subsystem for linux will soon mean that the kernel component of the Snare for Linux agent, will no longer be required.
The Snare Audit Daemon
The Snare audit daemon acts as an interface between the Linux kernel, and the security administrator. It allow you to turn on events, filter the output, and potentially push audit log information back to a central location for collection, analysis and archival.
The Snare Micro-Web Server, and Audit GUI
The Snare audit GUI provides a graphical user interface to the Snare audit daemon. It allows you to add, remove or modify audit objectives, and change reporting options.
The Micro-Web Server, is embedded in the audit daemon, and provides a very simple configuration capability that can be managed from your web browser.
Enhancements:
- Added support for compound matching elements (e.g. name=/etc/* name!=/etc/blah/*)
- Improved authentication support for remote control interface
- Updated SELinux policy (RHEL5 support)
- Improved automatic audit configuration using objective returncode detection to pre filter unnecessary records
- Fixed element matching error
- Fixed error in criticality reporting (e.g. criticality was always zero)
- Fixed race condition that could potentially clear all audit rules on restart
- Improved effeciency allowing a higher throughput
- Improved installer for easier deployment
- Disabled local logging by default
<<lessSNARE is divided into three key components:
The Kernel changes
In order to collect event log data, Snare needs to add auditing support into the operating system. You can choose to either install a binary version of the kernel, with Snare already integrated, or you can apply a patch to your kernel source.
Although we try hard to make Snare as easy to install as possible, there are hundreds of different distributions and kernel versions, and it would be an immense task to build Snare for each variant. We are hoping that recent efforts towards creating a native auditing subsystem for linux will soon mean that the kernel component of the Snare for Linux agent, will no longer be required.
The Snare Audit Daemon
The Snare audit daemon acts as an interface between the Linux kernel, and the security administrator. It allow you to turn on events, filter the output, and potentially push audit log information back to a central location for collection, analysis and archival.
The Snare Micro-Web Server, and Audit GUI
The Snare audit GUI provides a graphical user interface to the Snare audit daemon. It allows you to add, remove or modify audit objectives, and change reporting options.
The Micro-Web Server, is embedded in the audit daemon, and provides a very simple configuration capability that can be managed from your web browser.
Enhancements:
- Added support for compound matching elements (e.g. name=/etc/* name!=/etc/blah/*)
- Improved authentication support for remote control interface
- Updated SELinux policy (RHEL5 support)
- Improved automatic audit configuration using objective returncode detection to pre filter unnecessary records
- Fixed element matching error
- Fixed error in criticality reporting (e.g. criticality was always zero)
- Fixed race condition that could potentially clear all audit rules on restart
- Improved effeciency allowing a higher throughput
- Improved installer for easier deployment
- Disabled local logging by default
Download (0.32MB)
Added: 2007-08-08 License: GPL (GNU General Public License) Price:
813 downloads
cs.edu Slax Live 0.1 Alpha
cs.edu Slax Live is a LiveCD for Computer Science Students. more>>
cs.edu Slax Live is a LiveCD for Computer Science Students.
The cs.edu edition of the Slax aims at providing the richness of GNU/Linux as a development environment to computer science students. The 650 MB of this CD are packed with programming tools and reference documentation. This distribution also tries to remain true to the Slackware tradition of simplicity.
Included Software:
- Compilers and interpreters for numerous programming languages: Ada, C/C++/ObjC/C#, Eiffel, Fortran, Haskell, Icon, Java, Lisp, OCaml, PHP, Perl, Prolog, Python, Ruby, Scheme, SmallTalk, Tcl/Tk, ...
- Development tools including make, autoconf, automake, arch, cvs, flex and bison, antlr, gdb, ddd, valgrind, ...
- The teTeX distribution.
- Browsable documentation for these, plus for several document formats (about 800 MB of documentation).
- GNU/Emacs with several modes: auctex, jdee and tuareg.
- A minimalist server configuration including apache and mysql.
- Enlightenment as the window manager.
- A few useful applications including gimp and mozilla.
Enhancements:
- added software, see complete list in installed_packages.txt
- added `nodma option to handle buggy DMA hardware
- added `kbd= option to set keyboard layout
- set imps/2 as the default mouse protocol
- set vga=773 as the default console text mode
- changed default refresh rates
- changed /etc/inittab to boot at runlevel 4 by default
- changed /etc/rc.d/rc.4 to handle Xorg auto-configuration
- added /etc/X11/xinit/xinitrc.guest as the root and slax xinitrc
- changed /etc/rc.d/rc.slax to handle random password generation
- added /sbin/slaxpasswd and a patched makepasswd
- changed /etc/sudoers, /etc/suauth, /etc/login.access
- changed /etc/rc.d/rc.httpd to generate apache configuration
- added /etc/apache/httpd.conf.bsm and /bin/bashmod for this
- changed /etc/rc.d/rc.mysqld to generate mysql table and random password
- changed /etc/profile and /etc/skel
- modified portions of /usr/bin/xconf
- added /etc/zprofile, /etc/zshrc
- changed DHCP client configuration
- added /etc/rc.d/rc.firewall
- configured some /etc/X11/apps-default/*
- changed mozillas default configuration in /usr/lib/mozilla/default
- added AdBlock and Themer mozillas extensions
- configured swaret
- configured gpg with the Slackware security key and my key
- put a 2.4.28-rc1 linux kernel
- added a hell of a lot of documentation, see /usr/doc and /usr/doc/languages
- added an ugly wallpaper
<<lessThe cs.edu edition of the Slax aims at providing the richness of GNU/Linux as a development environment to computer science students. The 650 MB of this CD are packed with programming tools and reference documentation. This distribution also tries to remain true to the Slackware tradition of simplicity.
Included Software:
- Compilers and interpreters for numerous programming languages: Ada, C/C++/ObjC/C#, Eiffel, Fortran, Haskell, Icon, Java, Lisp, OCaml, PHP, Perl, Prolog, Python, Ruby, Scheme, SmallTalk, Tcl/Tk, ...
- Development tools including make, autoconf, automake, arch, cvs, flex and bison, antlr, gdb, ddd, valgrind, ...
- The teTeX distribution.
- Browsable documentation for these, plus for several document formats (about 800 MB of documentation).
- GNU/Emacs with several modes: auctex, jdee and tuareg.
- A minimalist server configuration including apache and mysql.
- Enlightenment as the window manager.
- A few useful applications including gimp and mozilla.
Enhancements:
- added software, see complete list in installed_packages.txt
- added `nodma option to handle buggy DMA hardware
- added `kbd= option to set keyboard layout
- set imps/2 as the default mouse protocol
- set vga=773 as the default console text mode
- changed default refresh rates
- changed /etc/inittab to boot at runlevel 4 by default
- changed /etc/rc.d/rc.4 to handle Xorg auto-configuration
- added /etc/X11/xinit/xinitrc.guest as the root and slax xinitrc
- changed /etc/rc.d/rc.slax to handle random password generation
- added /sbin/slaxpasswd and a patched makepasswd
- changed /etc/sudoers, /etc/suauth, /etc/login.access
- changed /etc/rc.d/rc.httpd to generate apache configuration
- added /etc/apache/httpd.conf.bsm and /bin/bashmod for this
- changed /etc/rc.d/rc.mysqld to generate mysql table and random password
- changed /etc/profile and /etc/skel
- modified portions of /usr/bin/xconf
- added /etc/zprofile, /etc/zshrc
- changed DHCP client configuration
- added /etc/rc.d/rc.firewall
- configured some /etc/X11/apps-default/*
- changed mozillas default configuration in /usr/lib/mozilla/default
- added AdBlock and Themer mozillas extensions
- configured swaret
- configured gpg with the Slackware security key and my key
- put a 2.4.28-rc1 linux kernel
- added a hell of a lot of documentation, see /usr/doc and /usr/doc/languages
- added an ugly wallpaper
Download (653.2MB)
Added: 2006-06-12 License: GPL (GNU General Public License) Price:
1237 downloads
Secleted [ 0 ] software to compare
- Page: 1 of 1
- 1
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above bsm search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed
