-
The problem manifests itself like so:
# twadmin --create-polfile -S /usr/local/etc/site.key /usr/local/etc/twpol.txt
### Error: Rule already defined as a start or stop point of another rule.
### /usr/local/lib: Line number 241
### Exiting...
The policy file was not altered.
and can be fixed by commenting out line 241 in policy/twpol-Linux.txt.
2009-10-15 21:05:13 UTC by styluseater
-
In twstrings.cpp, the TSS_PRODUCT_NAME string is misspelled. Since this is what gets put in things like the "from" line in emails, it's a bit unfortunate. Unless, perhaps, this is an inside joke I don't get.
It's hardly needed, but attached is a context diff of the fix.
2009-09-14 21:27:36 UTC by mahousu
-
hello,
Inside my policy I put a line like :
/appli//logs -> $(Growing)
I apply this policy, reinit the database and to test I add some addtionnal lines inside /appli/logs/jonas.log file (this file already exists). After I create a new file inside /appli/logs called test.log.
After that I scan with tripwire and I have Total violations found : 2 (one for the creation of the new file...
2009-09-11 07:15:36 UTC by shakenfr
-
I've created a makefile to help automate a number of tasks, including installation. I've written docs for it at the top of the file (see attached) and I'm hoping it can get included in the RPM in the /etc/tripwire directory.
Essentially you can (cd /etc/tripwire first):
# make init
right after RPM installation, which will take care of creating the keys (it will prompt as usual), doing...
2009-08-29 20:30:32 UTC by ekkis
-
I wrote a makefile to make things easier (see attached). I tried to e-mail the maintainer for inclusion in the RPM (put under /etc/tripwire) but the mails bounce. anyway, after installing the RPM, you can do:
# cd /etc/tripwire
# make init
and that will take care of creating the keys (it will prompt as usual), doing --init and --check and will also --update --accept-all (because the...
2009-08-29 20:20:59 UTC by ekkis
-
Does anyone have any instructions on how to install this on ESX 3.5?
This would be extremely helpful.
2009-08-05 17:09:12 UTC by ztoy01
-
Has there been any discussion of the merits, possibility or difficulty or making tripwire prelink-aware? I haven't found any mention in the forums.
2009-07-08 14:53:57 UTC by ntallen
-
Editing your pol.txt file you may set up an entry for your directory that is changing.
For example:
/path/to/changing/files -> $(Dynamic);
Other options could be used, read the top of your pol.txt file for definitions
Then update your binary policy file and reconcile the database with this command:
tripwire -m p -c tw.cfg -p tw.pol -d...
2009-06-07 19:02:50 UTC by countrygrrl
