LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 05-28-2012, 04:24 PM   #1
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 21

Rep: Reputation: 0
tripwire + prelink + cron mail report headache


Hello.
i have a centos 6.2 64bit box that i've installed tripwire on. ( opensource tripwire )

now, i configured tripwire to automatically report to me via crontab everyday at 12:00 AM every change made to the system.
the tripwire command has a flag that when issued send a mail as defined in it's policy file.
the problem is i need crond to send emails too.
i dont only have tripwire giving reports, i also have yum check-update emails sent once a day.
the problem was fine until prelink automagically ran one time, then report sizes were skyrocketing, so i disabled prelink, not much use for it on a 99.99% uptime box anyway.

my question is, how can i only have tripwire itsself sending me emails and how can i disable crond's report for tripwire but keep crond's report for yum ?
 
Old 05-29-2012, 09:22 PM   #2
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, Lubuntu, FreeBSD
Posts: 3,930
Blog Entries: 5

Rep: Reputation: Disabled
It sounds like you have two separate cronjobs sending you tripwire reports, correct? (You set up one that you wish to keep, and the package - or script - that you installed tripwire with must have set up another.)

Check /etc/crontab, root's crontab (# crontab -l), /etc/cron.d, and /etc/cron.daily for the other cronjob.
 
Old 05-30-2012, 02:39 AM   #3
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 21

Original Poster
Rep: Reputation: 0
well, crond, if configured, sends emails from all cron entries stdout at runtime.
tripwire itself can send emails and i have a line in /etc/crontab that sais:
0 0 * * * root `which tripwire` -m c -M -v
the -M flag is for mail.
so the result is as follows

i have a mail coming from crond
and i have another mail coming from tripwire itself.


i want to keep the tripwire mail but configure cron to stop sending mails for tripwire alone.
i have other cronjobs that i do want to receive reports of.
 
Old 05-30-2012, 10:10 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,988
Blog Entries: 54

Rep: Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743Reputation: 2743
Ensure the cronjob doesn't output anything.
 
1 members found this post helpful.
Old 05-31-2012, 02:16 AM   #5
seccentral
LQ Newbie
 
Registered: Mar 2011
Distribution: Linux mint
Posts: 21

Original Poster
Rep: Reputation: 0
ty unSpawn
 
  


Reply

Tags
crond, email, prelink prelinking, report, tripwire


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
prelink cron log errors ITDevil Linux - Newbie 0 11-11-2007 06:05 AM
prelink and tripwire hank43 Linux - Server 0 04-08-2007 07:05 PM
tripwire modifies /root when run from cron phil.d.g Linux - Security 3 05-17-2005 11:27 PM
tripwire not sending report GUIPenguin Linux - Security 3 03-29-2005 12:59 AM
Sendmail /etc/mail/virtusertable headache! katana Solaris / OpenSolaris 4 12-29-2002 12:21 AM


All times are GMT -5. The time now is 06:21 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration