Tripwire Help

perusubbu · 09-27-2013, 08:04 AM

Hi All,

I have created the rule in Tripwire policy file.Could you please let me know how to check for file size,File Type,File owner's user ID,File is increasing in size.I have framed a rule like below in my Tripwire policy file.It is throwing a error.Please suggest

# ESCommon
(
rulename = "ESCommon",
severity = $(SIG_HI)
)
{
/usr/local/gtech/eseries/escommon/bin ->+s+t+u+l $(SEC_BIN) ;
/usr/local/gtech/eseries/escommon/lib -> +s+t+u+l $(SEC_BIN) ;
}

unSpawn · 10-05-2013, 07:51 AM

Quote:

Originally Posted by perusubbu

Could you please let me know how to check for file size,File Type,File owner's user ID,File is increasing in size.

tripwire comes with a manual. I suggest you read it and post the rules you would like to apply for us to check. That should show you understand creating custom rules (why do that else if you can't verify what you're doing?) and that's way more efficient.

Quote:

Originally Posted by perusubbu

I have framed a rule like below in my Tripwire policy file.It is throwing a error.

Posting the complete configuration file and actual error may help.