Package: samhain (4.1.4-4 and others)

[ Source: samhain  ]

Data integrity and host intrusion alert system

Samhain is an integrity checker and host intrusion detection system that can be used on single hosts as well as large, UNIX-based networks. It supports central monitoring as well as powerful (and new) stealth features to run undetected on memory using steganography.

Main features

    * Complete integrity check
         + uses cryptographic checksums of files to detect
           modifications,
         + can find rogue SUID executables anywhere on disk, and
    * Centralized monitoring
         + native support for logging to a central server via encrypted
           and authenticated connections
    * Tamper resistance
         + database and configuration files can be signed
         + logfile entries and e-mail reports are signed
         + support for stealth operation

Tags: System Administration: Monitoring, User Interface: Command Line, interface::daemon, role::program, Scope: Utility, Security: Intrusion Detection, security::integrity, use::monitor

Other Packages Related to samhain

• dep: debconf (>= 1.2.9)

  Debian configuration management system

  or debconf-2.0

  virtual package provided by cdebconf, cdebconf-udeb, debconf

• dep: libauparse0 (>= 1:2.2.1) [hppa, ia64, s390x]

  Dynamic library for parsing security auditing

• dep: libauparse0t64 (>= 1:2.2.1) [not hppa, ia64, s390x]

  Dynamic library for parsing security auditing

• dep: libc6 (>= 2.34) [not alpha, ia64, sh4]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.40) [sh4]

• dep: libc6.1 (>= 2.34) [alpha]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6.1-udeb

  dep: libc6.1 (>= 2.37) [ia64]

• dep: libgnutls30t64 (>= 3.7.0) [sparc64]

  GNU TLS library - main runtime library

• dep: libltdl7 (>= 2.4.7) [sparc64]

  System independent dlopen wrapper for GNU libtool

• dep: libnsl2 (>= 1.0) [sparc64]

  Public client interface for NIS(YP) and NIS+

• dep: libprelude28 [hppa, ia64, s390x]

  Security Information and Events Management system [ Base library ]

• dep: libprelude28t64 [ppc64, sparc64]

  Security Information and Events Management system [ Base library ]

Download samhain

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	4.1.4-4	1,108.9 kB	2,967.0 kB	[list of files]
amd64	4.1.4-4	1,132.4 kB	2,835.0 kB	[list of files]
arm64	4.1.4-4	1,099.0 kB	2,839.0 kB	[list of files]
armel	4.1.4-4	1,109.2 kB	2,816.0 kB	[list of files]
armhf	4.1.4-4	1,111.3 kB	2,664.0 kB	[list of files]
hppa (unofficial port)	4.1.4-2.1	1,134.8 kB	2,885.0 kB	[list of files]
i386	4.1.4-4	1,127.8 kB	2,856.0 kB	[list of files]
ia64 (unofficial port)	4.1.4-2.1	1,195.1 kB	3,387.0 kB	[list of files]
m68k (unofficial port)	4.1.4-4	1,090.8 kB	2,775.0 kB	[list of files]
mips64el	4.1.4-4	1,094.9 kB	2,935.0 kB	[list of files]
ppc64 (unofficial port)	4.1.4-2.1+b1	1,140.0 kB	3,044.0 kB	[list of files]
ppc64el	4.1.4-4	1,127.6 kB	3,031.0 kB	[list of files]
riscv64	4.1.4-4	1,135.3 kB	2,779.0 kB	[list of files]
s390x	4.1.4-2.1	1,134.6 kB	2,839.0 kB	[list of files]
sh4 (unofficial port)	4.1.4-4	1,156.3 kB	2,768.0 kB	[list of files]
sparc64 (unofficial port)	4.1.4-2.1+b1	1,105.4 kB	3,239.0 kB	[list of files]
x32 (unofficial port)	4.1.4-4	1,124.2 kB	2,789.0 kB	[list of files]