LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 09-24-2013, 05:59 AM   #1
perusubbu
LQ Newbie
 
Registered: Sep 2013
Posts: 13

Rep: Reputation: Disabled
Tripwire Help


Hi All,

Could you please suggest how to edit the config file as well as the policy file in tripwire.

[root@xxsi1242 tripwire]# tripwire --check
### Warning: Config file is unencrypted.
### Warning: Policy file is unencrypted.
Parsing policy file: /etc/tripwire/tw.pol
### Error: Policy file does not match policy used to create database.
### Exiting...
[root@xxsi1242 tripwire]#
 
Old 09-24-2013, 06:19 AM   #2
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387
You don't mention any of the steps you've taken and commands you've used.

Maybe these will come in handy:
Code:
# enter and clean
cd /etc/tripwire && rm *bak

# after editing twcfg.txt
twadmin -m F -S site.key twcfg.txt && rm tw.cfg.bak

# after editing twpol.txt
twadmin -m P -S site.key twpol.txt && rm tw.pol.bak

# do not stay in /etc/tripwire
cd ~
# initiate
tripwire -m i

# check
cd ~
tripwire -m c

# view Tripwire Reports
/usr/sbin/twprint -m r --twrfile /var/lib/tripwire/report/<name>.twr

# view Tripwire Databases / single file from DB
/usr/sbin/twprint -m d --print-dbfile | more
/usr/sbin/twprint -m d --print-dbfile /etc/hosts

# update
cd ~
/usr/sbin/tripwire --update --twrfile /var/lib/tripwire/report/<name>.twr
 
Old 09-24-2013, 06:37 AM   #3
perusubbu
LQ Newbie
 
Registered: Sep 2013
Posts: 13

Original Poster
Rep: Reputation: Disabled
Hi Druna,

Thx for your immediate reply.Could you please tell me how to get the value for local passphrase


[root@xxsi1242 ~]# tripwire -m i
Please enter your local passphrase:
 
Old 09-24-2013, 07:34 AM   #4
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387
During the tripwire install (twpinst.sh, if I'm not mistaken) you were asked to set a local and site passphrase, so you should know what it is.
 
Old 09-24-2013, 08:08 AM   #5
perusubbu
LQ Newbie
 
Registered: Sep 2013
Posts: 13

Original Poster
Rep: Reputation: Disabled
Thx Druuna,

Issue got resolved now..
 
Old 09-24-2013, 08:14 AM   #6
druuna
LQ Veteran
 
Registered: Sep 2003
Posts: 10,532
Blog Entries: 7

Rep: Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387Reputation: 2387
You're welcome.

BTW: Can you put up the [SOLVED] tag (upper right hand corner or use the Thread Tools menu).
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
tripwire, where can I get it? linuxistan Linux - Networking 1 10-19-2004 11:12 PM
tripwire reports /usr/sbin/tripwire changed alfaalfabeta Linux - Security 5 07-22-2003 06:52 PM
Tripwire MrJoshua Linux - Software 1 07-16-2003 10:33 AM
Tripwire pk21 Linux - Security 5 06-08-2003 10:43 AM
Tripwire? janderson622 Linux - Security 2 05-01-2001 01:33 PM


All times are GMT -5. The time now is 04:21 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration