Free system local audit daemon 2.0 software for linux

SLAD is a tool for performing local security checks against GNU/Linux systems.

SLAD has been primarily developed for the BOSS project to work together with Nessus to enhance its local scanning capabilities. For example, scanning for weak passwords with a tool like John-the-Ripper is something that simply cannot be achieved by a network scan.

Therefore, SLAD is required to be installed on every GNU/Linux system where local auditing needs to be done. SLAD can then be used as a stand-alone application or more conveniently through Nessus. For usage with Nessus two NASL plugins are provided for interfacing between Nessus and SLAD

The Version 2.0 provides a XML Interface for Parameters and easy integration of additional audit-parameters and tools. To help the administrator to integrate a new feature-set, a development-documentation is provided with the cvs.

SLAD has been tested and verified on the following platforms:

RedHat Fedora Core 3
SuSe 9.2
Debian 3.0 (woody)
Debian 3.1 (sarge)
ERPOSS3
Gentoo Linux 2004.3

SLAD is implemented in Perl and provides an extendable plugin architecture allowing to use various GPL-based security scanners and auditing tools under one common framework. Currently, SLAD comes packaged with

John-the-Ripper
Chkrootkit
LSOF
ClamAV
Tripwire
TIGER

As a result SLAD delivers reports of these locally installed auditing and analysis tools. When used with Nessus the individual reports are wrapped into a standard Nessus report.

SLAD as well as the SLAD NASL Plugins can be downloaded from this Website in their current stable release V2.0.

Installation:

You can use our "easy-to-use" GTK installer, this installer downloads the lastest SLAD Release Binary, and install it on the target system. You only need to provide the login for the traget system.

audit package contains the user-space utilities for creating audit rules. As well as for storing and searching the audit records generate by the audit subsystem in the Linux 2.6 kernel.
Usage:
Examples usage of utilities:
General:
Window 1:
./auditd
Window 2 (you dont have to have the daemon running to try this, but
enabled has to be 1):
./auditctl -s
./auditctl -a entry,always -S open
ls
./auditctl -d entry,always -S open
Identity tracking:
./auditctl -a exit,always -S all -F loginuid=2000
./auditctl -L 2000,"test uid"
Enhancements:
- Updates were made to system-config-audit. auditctl was updated to better handle watching of directories with older kernels.
- Memory leaks and an invalid free in auditd were fixed along with interpretations in auparse.

Music daemon(musicd) is a music playing server that supports multiple formats through plugins and multiple playlists. Musicd supports plugins to enable playing of different audioformats. The plugin-api is quite similiar to one that the popular XMMS uses. Currently XMMS-plugins are not directly supported, but if I find the time, Ill make a meta-plugin to support them.
The first reason to make the player a server is to make it possible to use many different frontends and even at the same time. You can use a GUI if you like them, but anything it can do, can be done from commandline too.
The second reason is to make sure that the GUI or X does not crash the whole player. I have found that many software with a GUI tend to crash. With musicd the player is unaffected by this and you can start the interface again.
Main features:
- Musicd has its own simple text-based protocol for player-frontend communication.
- Support for unlimited number of playlists, songs per playlist and frontends connect at the same time
- Support for both IPv4 and IPv6. Also UNIX-sockets are supported for local connections.
- Currently supported audioformats: mp3 (ffmpeg), ogg vorbis (vorbisfile) and mods (libmikmod).
- Support for OSS and Solaris ouput.
- Musicd has been tested on x86 Linux and Solaris 9.
Enhancements:
- Calling play while already playing shouldnt cause deadlocks anymore
- Load command on a file that has too long line as the last line locked up the daemon, this shouldnt happen anymore
- Invalid id3tags shouldnt give random data anymore
- Invalid filenames shouldnt crash the player anymore

wifistatd is a script which generates a PNG graphing signal/noise/link levels on a selected wireless interface.

To install wifistatd on a UNIX machine untar the archive with program.
Then you must type:

./wifistatd.pl install

If everything went OK (it should), youll get the db.rrd database file in your current working directory.

To configure daemon edit the head part of wifistatd.pl.

getting_started
To start, just type:
./wifistatd.pl start

To stop, just type:
./wifistatd.pl stop

ESE Key Daemon is a multimedia keyboard driver for Linux. No kernel patch is needed.
ESE Key Daemon is a userspace program which pools /dev/input/event interfaces for incoming keyboard key presses.
Enhancements:
- A bug in the configuration file handling routines was fixed.

OLSR daemon project is an implementation of the Optimized Link State Routing protocol for mobile ad-hoc networks (MANETs).
OLSR is a routing protocol for mobile ad-hoc networks. The protocol is pro-active, table driven and utilizes a technique called multipoint relaying for message flooding. olsrd also implements a popular optional link quality extension. Currently the implementation compiles on GNU/Linux, Windows, OS X, FreeBSD and NetBSD systems.
Olsrd is ment to be a well structured and well coded implementation that should be easy to maintain, expand and port to other platforms. The implementation is RFC3626 compliant with respect to both core and auxiliary functioning.
Olsrd supports use of loadable plugins. These can be used to to handle and generate custom packettypes to be carried by OLSRs MPR flooding scheme or for any other desired functioning.
Enhancements:
- Network simulator (olsr_switch) added. Read more in the README file included in the release.
- New experimental fish eye link distribution algorithm. Read more in the README file included in the release.
- Tiny Application Server(TAS) plugin added
- Plugin interface changes. Olsrd now exports all symbols mening that plugins can access all olsrd functions easily.
- Olsrd now builds and runs on OpenBSD
- Build system rewrites(OS detection is now done automagically)
- Lots of bugfixes and minor changes

X Transparency Daemon provides a daemon which uses the X.org X11 server to set the transparency of user-defined applications to user-defined values.

Installation

Install from package or source and add the following lines

xcompmgr -c -F &
transd &

to your $HOME/.xinitrc

Configuration

* System-wide configuration file: /etc/transd/transd.conf
* User-based configuration file: $HOME/.transd/transd.conf

Net::Daemon::SSL is a SSL extension for Net::Daemon.

SYNOPSIS

use Net::Daemon::SSL;
package MyDaemon;
@MyDaemon::ISA = qw (Net::Daemon::SSL);
sub Run
{
my $this = shift;
my $buffer;
$this->{socket}->print ( "vasja was heren" );
$this->{socket}->sysread ( $buffer, 100 ); # Attention! getline() method
# do not work with IO::Socket::SSL
# version 0.73
# see perldoc IO::Socket::SSL
# for more details
}
package main;
my $daemon = new MyDaemon ( {}, @ARGV ); # you can use --help command line key
$daemon || die "error create daemon instance: $!n";
$daemon->Bind();
__top

This class implements an IO::Socket::SSL functionality for Net::Daemon class. See perldoc Net::Daemon for more information about Net::Daemon usage.

Options

This method add IO::Socket::SSL specific options ( SSL_use_cert, SSL_verify_mode, SSL_key_file, SSL_cert_file, SSL_ca_path, SSL_ca_file ) to generic Net::Daemon options. See perldoc IO::Socket::SSL for description of this options

Bind

This method creates an IO::Socket::SSL::SafeAccept socket, stores this socket into $this->{socket} and passes control to parent Net::Daemon::Bind. The IO::Socket::SSL::SafeAccept is a class inherited from IO::Socket::SSL with the only difference from parent class - the accept() method of this class returns EINTR on *any* error. This trick is needed to ``hack Net::Daemon::Bind functionality: if this method gets an error from accept() ( Net::Daemon::SSL auth error, for example ) it will call Fatal() method and die unless this is a EINTR error.