LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 09-30-2003, 02:06 PM   #1
AWyant
LQ Newbie
 
Registered: Sep 2003
Location: Paris, MO
Posts: 12

Rep: Reputation: 0
tripwire config


I've got my tripwire set up and working great. Now, I need to set it up to run daily, and then email me the log file. Does anyone have, or can they point me in the right direction for commands?

I think I've got the daily file generation command:
#/usr/TSS/bin/tripwire -m c -t l -M

Basically, I have to have the log files where it scanned and noticed any errors.

Speaking of errors. Mine is generating an error, but I can't find it anywhere to comment it out. I have successfully commented out all other errors. However, a scan of the file, does not reveal the particular error file. Do I need to add this file, and then comment it out? The file is:

/etc/tripwire/localhost-local.key


Thanks for everyones help
 
Old 10-01-2003, 06:27 PM   #2
micxz
Senior Member
 
Registered: Sep 2002
Location: CA
Distribution: openSuSE, Cent OS, Slackware
Posts: 1,131

Rep: Reputation: 75
Use Cron:

inside cron.daily add a script like:

#!/bin/sh
/usr/sbin/tripwire --check 2>&1 | mail -s "TripWire Output" root

You may need to ajust the command above to work for your system. For example the report generated by tripwore needs to be viewed with another command I believe it's:
twprint --print-report -r /var/lib/tripwire/report/titan-YYYYMMDD-HMMSS.twr
 
Old 12-31-2003, 01:13 PM   #3
jancurtis
LQ Newbie
 
Registered: Aug 2003
Posts: 1

Rep: Reputation: 0
Your twpol.txt file should contain a line that reads, by default, "HOSTNAME=localhost;". Just change "localhost" to the name of your machine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Tripwire LinuxRam Linux - Security 1 08-19-2004 01:42 PM
I need tripwire help Darkangel90 Slackware 2 04-22-2004 01:15 AM
tripwire reports /usr/sbin/tripwire changed alfaalfabeta Linux - Security 5 07-22-2003 05:52 PM
Tripwire MrJoshua Linux - Software 1 07-16-2003 09:33 AM
Tripwire pk21 Linux - Security 5 06-08-2003 09:43 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:23 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration