In article <2t7tmj$eqj@si-nic.hrz.uni-siegen.de> peter@uni-siegen.de (Peter Merz) writes: Look at ftp.uni-siegen.de under /pub/unix/security/tools/admin/Tiger !! I looked here, and unless it has been rolled in to the tar file, there is a small patch file missing. The central site for 'tiger' is from: net.tamu.edu:/pub/security/TAMU/ The files are: tiger-2.2.3.tar.gz tiger-2.2.3.check_devs.fix Also, in the directory `tiger-sigs' are slightly newer digital signature databases than those rolled into the distribution. In `tiger-sigs/os-dist' are fairly complete digital signature databases for many releases of SunOS (by complete, I mean most non-volatile files stored on the release media and lots of security patches). The digital signatures are a mix of MD5 and Snefru (It started out with Snefru and have been migrating to MD5... most stuff is MD5 now). Note that the small signature databases contained in the distribution and in the `tiger-sigs' directory do *NOT* contain signatures for all files that have been known to be altered [ala Brad Powell's post about kill(1)]. These signatures *should* be in the signature databases contained in the `tiger-sigs/os-dist' directory. If there are any files for which signatures are missing, drop me a line. Doug. -- -- Douglas Lee Schales Texas A&M University Doug.Schales@net.tamu.edu Computing & Information Services Networking Project