Tiger UNIX security tool - News
New stable release: Tiger 3.2
Item posted by Javier Fernandez-Sanguino Peña <jfs> on Fri 09 May 2003 09:20:05 PM UTC.
A new release of Tiger, version 3.2, has recently been published. This release is considered 'stable' (substituting the 2.2.4 version). Tiger 3.2 fixes some security vulnerabilities (a buffer overflow in realpath.c detected by and unsafe use of 'eval' in some of the checks and utils), provides seven more checks and also fixes bugs present in previous releases. Some other new features are:
- an 'ignore' mechanism similar to logcheck's that permits the generation of flexible OS baselines based on regular expressions. (Suggested baselines will be provided in the future)
- a new installation and configuration mechanism to ease the process of installing Tiger
- more documentation, including information on the expected roadmap (in the TODO file) and the information sources used to improve Tiger.
For more information on the fixes and new checks please read the 'CHANGES' file.
Users of previous versions of Tiger are encouraged to upgrade to this new release.
Powered by Savane 3.13-54b4.
Corresponding source code