Tripwire - Revision history

Xunil: /* gentoo specific */

2011-09-22T08:07:32Z

gentoo specific

← Older revision		Revision as of 08:07, 22 September 2011
Line 52:		Line 52:

	... from this wiki http://en.gentoo-wiki.com/wiki/Tripwire		... from this wiki http://en.gentoo-wiki.com/wiki/Tripwire

			* initial database cleaning from no-existent diles:
			cd /etc/tripwire
			tripwire --init 2> stufftoprune
			* convert list to only filenames
			grep Filename stufftoprune \| awk '{print $3}' > filestoprune
			* remove fileanme lines from file
			cat filestoprune \| xargs -i perl -pi.bak -e 's!\A(\s+){}\b!\1#{}!g' /etc/tripwire/twpol.txt

Xunil at 08:05, 22 September 2011

2011-09-22T08:05:36Z

← Older revision		Revision as of 08:05, 22 September 2011
Line 18:		Line 18:
	* first install:		* first install:
	/etc/tripwire/twinstall.sh		/etc/tripwire/twinstall.sh

			* if twcfg.txt modified, then regen sign:
			twadmin -m P /etc/tripwire/twpol.txt

	* Generate database with passwords:		* Generate database with passwords:

Xunil: /* gentoo specific */

2011-09-22T08:01:14Z

gentoo specific

← Older revision		Revision as of 08:01, 22 September 2011
Line 38:		Line 38:

	https://34662.bugs.gentoo.org/attachment.cgi?id=269983		https://34662.bugs.gentoo.org/attachment.cgi?id=269983

			* run it like this:
			cd /etc/tripwire
			wget -O gentoo_generate.sh 'https://34662.bugs.gentoo.org/attachment.cgi?id=269983'
			chmod +x gentoo_generate.sh
			./gentoo_generate.sh > twpol.txt


	... from this post: https://bugs.gentoo.org/34662?id=34662		... from this post: https://bugs.gentoo.org/34662?id=34662

	... from this wiki http://en.gentoo-wiki.com/wiki/Tripwire		... from this wiki http://en.gentoo-wiki.com/wiki/Tripwire

Xunil at 07:59, 22 September 2011

2011-09-22T07:59:39Z

@@ Line 6: / Line 6: @@
 === installaing from repositories ===
 * debian based
   apt-get install tripwire
@@ Line 31: / Line 32: @@
 * adapt policy to the system:
   tripwire --update-policy -Z low /etc/tripwire/twpol.txt

Xunil: /* configuration / installation */

2011-09-22T07:58:03Z

configuration / installation

← Older revision		Revision as of 07:58, 22 September 2011
Line 5:		Line 5:
	== configuration / installation ==		== configuration / installation ==

	* installaing from repositories:		=== installaing from repositories ===
			* debian based
	apt-get install tripwire		apt-get install tripwire
	* red-hat		* red-hat based
	yum install tripwire		yum install tripwire
	* gentoo		* gentoo
	emerge app-admin/tripwire		emerge app-admin/tripwire

			=== first run ===

	* first install:		* first install:

Xunil at 07:01, 22 September 2011

2011-09-22T07:01:36Z

← Older revision		Revision as of 07:01, 22 September 2011
Line 1:		Line 1:

	http://www.tripwire.com/		http://www.tripwire.com/

Line 10:		Line 9:
	* red-hat		* red-hat
	yum install tripwire		yum install tripwire
			* gentoo
			emerge app-admin/tripwire

			* first install:
			/etc/tripwire/twinstall.sh

	* Generate database with passwords:		* Generate database with passwords:

Xunil at 06:41, 22 September 2011

2011-09-22T06:41:18Z

← Older revision		Revision as of 06:41, 22 September 2011
Line 1:		Line 1:

	~~= tripwire =~~

	http://www.tripwire.com/		http://www.tripwire.com/

Xunil: Created page with " = tripwire = http://www.tripwire.com/ * tripwire is a security tool to check for modified system files. == configuration / installation == * installaing from repositories: ..."

2011-09-22T06:41:10Z

Created page with " = tripwire = http://www.tripwire.com/ * tripwire is a security tool to check for modified system files. == configuration / installation == * installaing from repositories: ..."

New page

= tripwire =

http://www.tripwire.com/

* tripwire is a security tool to check for modified system files.

== configuration / installation ==

* installaing from repositories:
apt-get install tripwire
* red-hat
yum install tripwire

* Generate database with passwords:
tripwire -m i

* edit config file:
vi /etc/tripwire/twcfg.txt
* change this to false at first run. Put it back to true after directory rescan.
LOOSEDIRECTORYCHECKING =true

* edit policy file:
vi /etc/tripwire/twpol.txt

* adapt policy to the system:
tripwire --update-policy -Z low /etc/tripwire/twpol.txt