Dear list! I've tried to compile tripwire-2.3.1-2 port on my 5.2 release. Two diffe- rent tarballs have failed with message, that port was broken, all in one sentence. No any details. Well! Makefile has so- mething like: .if ${OSVERSION} >= 500000 BROKEN= "Fails to build inder 5.X" .endif One more: USE_GMAKE= yes Has someone compiled it successfully? Is it for a good reason to be like that on 5.x? Almost forgot. If I use "make install TRIPWIRE_ _FLOPPY=YES", where should I find binary and db? Floppy, both floppy and hdd? Best regards ZK
On Thu, Mar 04, 2004 at 08:44:42AM +0100, Zoran Kolic wrote:> Dear list! > I've tried to compile > tripwire-2.3.1-2 port on > my 5.2 release. Two diffe- > rent tarballs have failed > with message, that port > was broken, all in one > sentence. No any details. > Well! Makefile has so- > mething like: > > .if ${OSVERSION} >= 500000 > BROKEN= "Fails to build inder 5.X" > .endif > > One more: > > USE_GMAKE= yes > > Has someone compiled > it successfully? Is it > for a good reason to be > like that on 5.x?The makefile says the port is broken and fails to build under 5.x because, predictably, the port is broken and fails to build under 5.x ;-) It requires changes in order to compile, which no-one has provided yet. Kris -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 187 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20040304/0b78c98d/attachment.bin
Hello folks.. I have a quick question ipfw in a 4.8 server.. In /etc/rc.conf, if you set this - firewall_type="OPEN", is it also necessary for this options IPFIREWALL_DEFAULT_TO_ACCEPT in the kernel config file? I would think that using the first would be better because it can be removed, thus allowing no one access, including yourself if you aren't careful. Whereas the second method above, in the kernel config leaves it open if no rules exist or if all rules are flushed. So the the big question is, do I use both, one or the other? I know I can just do options IPFIREWALL, but I want to ensure no way of locking myself out at initial reboot, since this is a remote server. I am also aware of the risks of doing it remotely. But I need to do this. Thanks for your help. David Edwards --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.576 / Virus Database: 365 - Release Date: 1/30/2004