|
Noob needs help configuring tripwire
I'm completely new to tripwire, but I would like to be able to configure it so that I don't get 76 "No such file or dirctory" warnings every time I check or update the db. I went through the twpol.txt file and commented out all of the lines which point to nonexistent files/dirs (seriously, there are 76 of them. It took a long time), but when I try to use "tripwire --update-policy /etc/tripwire/twpol.txt", I get the following output:
======== Policy Update: Processing section Unix File System.
======== Step 1: Gathering information for the new policy.
### Error: Policy Update Added Object.
### An object has been added since the database was last updated.
### Object name: /root/tripwire_results.txt
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root
### > Modify Time
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.viminfo
### > Inode Number
### > Size
### > Modify Time
### > Change Time
### > CRC32
### > MD5
======== Step 2: Updating the database with new objects.
======== Step 3: Pruning unneeded objects from the database.
Policy update failed; policy and database files were not altered.
First of all, the string "viminfo" isn't even in the twpol.txt file. Secondly, I have no idea what any of those other messages mean.
Because of all this, the 76 files that don't exist show up in every tripwire message. It's really annoying. Anyone know how to fix the policy file so it builds?
|
