I know about aide, but it seems that configuration file is rather unintuitive, and sometimes it is hard to say what will be scanned, and what will be skipped.
I've also found that tripwire RPM from Red Hat 9 will work on FC1 and FC2 but not FC3. Source RPM from Red Hat 9 with latest Mandrake patches will compile on FC2 and work on FC3 also (but can't be compiled on FC3, because tripwire compiles with gcc up to 3.3.x, and fails to compile with 3.4.x). This doesn't look promising (what will happen when FC4, FC5, and so on are released).
Any other alternatives?
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7