LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-24-2003, 11:00 PM   #1
brain_bucket
LQ Newbie
 
Registered: Aug 2003
Posts: 15

Rep: Reputation: 0
Tripwire policy update


I've recently installed tripwire on my webserver and am trying to edit the policy file so it won't spit out so many of these errors
Code:
### Warning: File system error.
### Filename: /etc/smb.conf
### No such file or directory
### Continuing...
I've commented out the offending files in the /etc/tripwire/twpol.txt file and attempted to do a
tripwire --update-policy /etc/tripwire/twpo.txt
but all hell breaks loose during step 1 of the update proccess
Code:
[root@aeon /home/alex/downloads/tripwire-2.3 ] #tripwire --update-policy /etc/tripwire/twpol.txt
Parsing policy file: /etc/tripwire/twpol.txt
Please enter your local passphrase: 
Please enter your site passphrase: 
======== Policy Update: Processing section Unix File System.
======== Step 1: Gathering information for the new policy.
### Warning: File system error.
### Filename: /root/Mail
### No such file or directory
### Continuing...
### Error: Policy Update Added Object.
### An object has been added since the database was last updated.
### Object name: /var/lib/tripwire/aeon.twd
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.gconf
### > Modify Time
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object
### /root/.gconf/apps/gnome-settings/gedit
### > Modify Time
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object
### /root/.gconf/apps/gnome-settings/gedit/%gconf.xml
### > Inode Number
### > Size
### > Modify Time
### > Change Time
### > CRC32
### > MD5
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.gconfd
### > Modify Time
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.gconfd/saved_state
### > Modify Time
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.gnome2/gedit-2
### > Size
### > Modify Time
### > Change Time
### > CRC32
### > MD5
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.gnome2_private
### > Change Time
### Error: Policy Update Changed Object.
### An object has been changed since the database was last updated.
### Object name: Conflicting properties for object /root/.recently-used
### > Size
### > Modify Time
### > Change Time
### > Blocks
### > CRC32
### > MD5
======== Step 2: Updating the database with new objects.
======== Step 3: Pruning unneeded objects from the database.
Policy update failed; policy and database files were not altered.
What's wrong?
-brain_bucket2000
 
Old 09-03-2003, 08:54 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,361
Blog Entries: 55

Rep: Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547Reputation: 3547
Please reread the tripwire manual and verify you take the right steps in the right sequence to change your policy and database. I'm not using tripwire, and it's been a while since I read a tripw doc but I'm damn sure editing twpol.txt ain't the only step you need to take...
 
Old 09-03-2003, 09:35 AM   #3
gfried
LQ Newbie
 
Registered: Sep 2003
Posts: 1

Rep: Reputation: 0
By default Policy Update mode runs with --secure-mode high. You
may encounter errors when running in high security mode if the file system has changed since the last database update, and if the changes still cause a violation in the new policy.
To accommodate this situation, after determining that all of the violations reported in high security mode are authorized, you can update the policy file in low security mode:
tripwire -m p --secure-mode low /etc/tripwire/policy.txt
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
How to set the password policy and lockout policy bin_shell Linux - Security 4 03-24-2010 04:30 PM
Samba System Policy, Default User Policy scooter549 Linux - General 2 02-24-2009 03:23 AM
Tripwire + Logrotate Policy TruckStuff Linux - Security 6 09-08-2005 04:00 PM
Tripwire policy Q TruckStuff Linux - Security 1 07-03-2005 07:50 AM
Need Tripwire Policy Advice JimKyle Linux - Security 4 03-03-2002 06:03 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:15 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration