I need to update my tripwire file list since I updated my distro. I ran tripwire --config and here's what I got.
[root@jive-turkey root]# tripwire --update
### Error: File could not be opened.
### Filename: /var/lib/tripwire/report/jive-turkey.net-20040319-233531.twr
### No such file or directory
### Exiting...
[root@jive-turkey root]# man tripwire
[root@jive-turkey root]# tripwire --update
### Error: File could not be opened.
### Filename: /var/lib/tripwire/report/jive-turkey.net-20040319-233658.twr
### No such file or directory
### Exiting...
So, it looks like it's trying to find an old tw report with some sort of timestamp in the file name. What am I supposed to do? I don't know how to prdect what file name it wants next! A quick look through google didn't turn up anything promising.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Tripwire needs a report file to update against - if you don't supply one, it'll look for a 'default' report name. This is defined by the tw.cfg file, which in your case points to $(HOSTNAME)-$(DATE).twr. This is why the named report changes every time - the $(DATE) is populated dynamically, so it'll probably never match the one you want.
To get around this, point to a specific report file:
I need to update my tripwire file list since I updated my distro. I ran tripwire --config and here's what I got.
[root@jive-turkey root]# tripwire --update
### Error: File could not be opened.
### Filename: /var/lib/tripwire/report/jive-turkey.net-20040319-233531.twr
### No such file or directory
### Exiting...
[root@jive-turkey root]# man tripwire
[root@jive-turkey root]# tripwire --update
### Error: File could not be opened.
### Filename: /var/lib/tripwire/report/jive-turkey.net-20040319-233658.twr
### No such file or directory
### Exiting...
So, it looks like it's trying to find an old tw report with some sort of timestamp in the file name. What am I supposed to do? I don't know how to prdect what file name it wants next! A quick look through google didn't turn up anything promising.
make sure that you have a directory called:
/var/lib/tripwire/report
Max,
Tripwire needs a report file to update against - if you don't supply one, it'll look for a 'default' report name. This is defined by the tw.cfg file, which in your case points to $(HOSTNAME)-$(DATE).twr. This is why the named report changes every time - the $(DATE) is populated dynamically, so it'll probably never match the one you want.
To get around this, point to a specific report file:
# tripwire --update -r ../report/jive-turkey.net-20040319-100000.twr
Naturally, you'd want to put in the name of your most recent report in this command.
Hope this helps-
Jason I.