[ 原始碼： samhain ]
套件：samhain（4.1.4-2 以及其他的）
Data integrity and host intrusion alert system
Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.
Main features
* Complete integrity check
+ uses cryptographic checksums of files to detect
modifications,
+ can find rogue SUID executables anywhere on disk, and
* Centralized monitoring
+ native support for logging to a central server via encrypted
and authenticated connections
* Tamper resistance
+ database and configuration files can be signed
+ logfile entries and e-mail reports are signed
+ support for stealth operation
其他與 samhain 有關的套件
|
|
|
|
-
- dep: debconf (>= 1.2.9)
- Debian 設定管理系統
- 或者 debconf-2.0
- 本虛擬套件由這些套件填實： cdebconf, cdebconf-udeb, debconf
-
- dep: libauparse0 (>= 1:2.2.1)
- Dynamic library for parsing security auditing
-
- dep: libc6 (>= 2.15) [除 arm64]
- GNU C 函式庫：共用函式庫
同時作為一個虛擬套件由這些套件填實： libc6-udeb
- dep: libc6 (>= 2.17) [arm64]
-
- dep: libgcrypt20 (>= 1.7.0)
- LGPL Crypto library - runtime library
-
- dep: libgnutls30 (>= 3.5.0)
- GNU TLS library - main runtime library
-
- dep: libltdl7 (>= 2.4.6)
- System independent dlopen wrapper for GNU libtool
-
- dep: libpcre3
- Old Perl 5 Compatible Regular Expression Library - runtime files
-
- dep: libprelude23
- Security Information and Events Management system [ Base library ]
-
- dep: zlib1g (>= 1:1.2.0)
- 壓縮函式庫 - 跑程式時用(runtime)