[SOLVED] Tripwire Help

perusubbu · 09-24-2013, 04:59 AM

Hi All,

Could you please suggest how to edit the config file as well as the policy file in tripwire.

[root@xxsi1242 tripwire]# tripwire --check
### Warning: Config file is unencrypted.
### Warning: Policy file is unencrypted.
Parsing policy file: /etc/tripwire/tw.pol
### Error: Policy file does not match policy used to create database.
### Exiting...
[root@xxsi1242 tripwire]#

druuna · 09-24-2013, 05:19 AM

You don't mention any of the steps you've taken and commands you've used.

Maybe these will come in handy:

Code:

# enter and clean
cd /etc/tripwire && rm *bak

# after editing twcfg.txt
twadmin -m F -S site.key twcfg.txt && rm tw.cfg.bak

# after editing twpol.txt
twadmin -m P -S site.key twpol.txt && rm tw.pol.bak

# do not stay in /etc/tripwire
cd ~
# initiate
tripwire -m i

# check
cd ~
tripwire -m c

# view Tripwire Reports
/usr/sbin/twprint -m r --twrfile /var/lib/tripwire/report/<name>.twr

# view Tripwire Databases / single file from DB
/usr/sbin/twprint -m d --print-dbfile | more
/usr/sbin/twprint -m d --print-dbfile /etc/hosts

# update
cd ~
/usr/sbin/tripwire --update --twrfile /var/lib/tripwire/report/<name>.twr

perusubbu · 09-24-2013, 05:37 AM

Hi Druna,

Thx for your immediate reply.Could you please tell me how to get the value for local passphrase

[root@xxsi1242 ~]# tripwire -m i
Please enter your local passphrase:

druuna · 09-24-2013, 06:34 AM

During the tripwire install (twpinst.sh, if I'm not mistaken) you were asked to set a local and site passphrase, so you should know what it is.

perusubbu · 09-24-2013, 07:08 AM

Thx Druuna,

Issue got resolved now..

druuna · 09-24-2013, 07:14 AM

You're welcome.

BTW: Can you put up the [SOLVED] tag (upper right hand corner or use the Thread Tools menu).