Integrity of Installed Software

I l @ ve RuBoard

Monitoring the integrity of the software on your system is key to maintaining the security of the system. Software is altered directly by hackers installing hacking tools or through covert software which utilizes viruses, parasites, or worms to compromise systems.

Verifying Installed Software

Verifying the integrity of the installed software is necessary to determine that none of the software has been altered.

The software management system for HP-UX, Software Distributor, provides a utility which verifies the integrity of the installed software ” swverify . Unfortunately, many of the patches do not modify the integrity database which the software verification system uses to determine if the installed software has been altered. Therefore, the swverify command will often indicate packages which have been patched as suspect.

To verify all software on your system, enter:

 /usr/sbin/swverify \* 

After the analysis, any inconsistencies, warnings, or errors will be found in the logfile: /var/adm/sw/swagent.log .

I l @ ve RuBoard