Software Map

sptrace is a LKM designed to give administrators more control over the ptrace() call. It limits users' access to the ptrace() call. It can disable ptrace altogether, or if you add a ptrace group to your system, only users in that group will be able to use ptrace().

Fast OnlineUpdate for SuSE (fou4s) is a bash script that provides the functionality of YOU (YaST OnlineUpdate), but can also work in background and check for updates every night. It supports resumed downloads and proxies by using wget. GPG signatures are also checked.

QtFprot is a frontend for FPROT 4.x, a free (for personal use) Linux virus-scanner. It's similar to XFprot, but written in Qt. It allows you to set all FPROT paramters with a comfortable GUI.

openHBCI is a C++ library for the German HomeBanking Computer Interface. It
includes some tutorials for testing the library. Its current capabilities
include complete key management on disc (RDH) and/or chip-card (DDV), the
ability to perform single customer credit transfers, and the ability to get
balance reports.

The Dazuko project provides a virtual device driver allowing (userland) applications to execute online file access control. It was originally developed by Avira GmbH (formerly known as H+BEDV Datentechnik GmbH) to allow on-access virus scanning. Other uses include a file-access monitor/logger or external security tools. Dazuko operates by intercepting file access calls and passing the file information to a userland application. The application then has the opportunity to tell the virtual device driver to allow or deny the file access. The application also receives information about the file access event, such as accessed file name, type of access, process id, and user id.

ndisc6 consists of three command line tools
(ndisc6, rdisc6, and traceroute6) that perform
ICMPv6 Neighbor Discovery, ICMPv6 Router
Discovery, and IPv6 tcptraceroute/traceroute respectively.
It is primarily meant for IPv6 networking
diagnostics and monitoring.

Astaro Portscan Detection is a netfilter target which will attempt to detect TCP and UDP port scans and log them to syslog. This target is based upon Solar Designer's scanlogd. It suppports mutliple levels of logging, custom prefixes for entries, weighted total port scan detection, and port scan temporal spread detection.

pfflowd is a small daemon which converts real-time
state expiry messages from OpenBSD's PF packet filter
into Cisco NetFlow datagrams. This allows very fine-
grained traffic accounting in conjunction with NetFlow
capable tools and places almost no incremental load on
a PF firewall.

ClamFS is a FUSE-based user-space file system for
Linux with on-access anti-virus file scanning
through the clamd daemon.

ClamCour is a multi-threaded Courier filter that allows Clam Antivirus to scan incoming mail for viruses, and rejects it if the check is positive. Attachments can be "quarantined", and custom domain-based email reports can be sent.

Java Anon Proxy attempts to provide a secure and scalable technical infrastructure for anonymous communication.

Knocker is a simple, versatile, and easy-to-use TCP security port scanner written in C, using threads. It is able to analyze hosts and the network services which are running on them. Knocker it is available for Linux, FreeBSD, many Unix platforms, and Windows 95/98/2000. Both a console version and a GTK+ version are available.

IC-RADIUS is a Cistron-based RADIUS server that uses MySQL to store all of its data. It includes a Web GUI to administer users, and to view all kinds of accounting reports (i.e. utilization graphs). Several new attributes have been added for prepaid setups, such as time limit by day, month, and total. It also includes scripts to import standard radius users, files, and dictionaries.