Error in my log file. Don't know what it means

subzero80 · 03-09-2003, 07:51 PM

I always get this email in my root account. If anyone could help that would be cool. I have a Red hat 8.0. Thanks
/etc/cron.daily/tripwire-check:

**** Error: Tripwire database for iserver.example.com not found. ****
**** Run /etc/tripwire/twinstall.sh and/or tripwire --init. ****

The example.com <-- is not my name of my server..

neil · 03-10-2003, 07:22 AM

This is telling you to intialise the tripwire program and generate a baseline database of your system.

# twadmin -m P /etc/tripwire/twpol.txt
# tripwire -m i

Then do a check
# tripwire -m c
which generates a report.

Then update your database as needed from the twr file that was generated in /var/lib/tripwire/report/<filename>.twr
with

# tripwire -m u --twrfile /var/lib/tripwire/report/<filename>.twr

see www.whitehats.com and www.sans.org reading room.

neil · 03-10-2003, 07:24 AM

of course to stop it you can edit your crontab
#crontab -e
also have a look in /etc/cron/cron.daily

or stop crond. I use ncurses.
# setup
select services and use the spacebar to uncheck crond.

It is better to use crond though.