BSD Ports

security/samhain-server 4.4.3_1 DragonFly

Samhain Intrusion Detection System

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
GPLv2
Categories
security
Package size
607.9 KiB, 1164.9 KiB installed

Description

Samhain is an open source file integrity and host-based intrusion detection system for Linux and Unix. It can run as a daemon process, and thus can remember file changes - contrary to a tool that runs from cron, if a file is modified you will get only one report, while subsequent checks of that file will ignore the modification as it is already reported (unless the file is modified again).

Samhain can optionally be used as client/server system to provide centralized monitoring for multiple host. Logging to a (MySQL or PostgreSQL) database is supported.

In the other systems

SystemPortVersion
DragonFlysecurity/samhain-server4.4.3_1
FreeBSDsecurity/samhain-server4.4.3_1
HardenedBSDsecurity/samhain-server4.4.3_1
GhostBSDsecurity/samhain-server4.4.3_1

Install

Binary package:

pkg install samhain-server

From DPorts:

cd /usr/dports/security/samhain-server && make install clean

Dependencies

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

To start the samhain daemon at system boot, add:

samhain_enable="YES"

and/or

yule_enable="YES"

to /etc/rc.conf.