file-integrity monitoring

[George Toft]

AIDE works well, and comes on the CentOS distribution.

caveats: Must have SELinux in Permissive/Enforcing, and they recommend 
having the database stored on removable media.

I have AIDE on all my servers and run "aide --check" every day with an 
alert if the result is not ok.

Regards,

George Toft

On 3/5/2015 4:17 PM, Keith Smith wrote:
>
>
> Hi,
>
> I am in the final steps of an annual Payment Card Industry compliance 
> process.  I have two CentOS servers that require file-integrity 
> monitoring or change-detection.  I was looking at Tripwire and it is 
> not open source which is what I expected it to be and there are some 
> complaints of it being difficult to configure, employee turnover, etc.
>
> Thank you in advance for any suggestions.
>