Re: [Tripwire-announce] what to do??

[Ron F. <rj...@sk...>]

On Wed, Apr 11, 2001 at 01:24:47PM -0700, Gary E. Miller wrote:
> with the new tripwire.  The problem we both had is that there is no
> obvious way to increase the verbosity when you do a simple run
> like this:
> 	tripwire -m c

./tripwire --help --check:
  .
  .
  .
  -M                   --email-report
  -t { 0|1|2|3|4 }     --email-report-level { 0|1|2|3|4 }

So something like the following:

   ./tripwire --check --email-report --email-report-level 3

should do the trick. If not, there is a bug.

> One problem that should also be in a FAQ is how to just set a global
> emailto for the entire run.  Putting it in every subsection is a
> pain.  I think this was just added as a feature but should be made
> simpler.  Maybe just a command line option?

Yes, the global email feature was just added. Adding the following:

GLOBALEMAIL = root,rj...@th...

to you config file, for instance, sends an email report to the two
recipients listed, after every integrity check.

There is a really good reason we don't just add command line options
arbitrarily, and prefer the config file route. There are known
exploits involved in spoofing command lines, etc. So we tend to use
the signed config files to help avoid these types of problems.

> My main problem with the emailto is that the report is sent as a
> blank message with an attachment.  This means I have to dowload and
> read the attachment separately.  Is there really a point to this?
> Just put in in line.

Hmmm. I get them inline. Are you using a MAILMETHOD of SMTP, or
SENDMAIL?

If you can, use SMTP, in which case you will also need the SMTPHOST
variable to point to your mail server.

If you still have problems with this, let me know.

> These may seem like simple things to you guys that have been using
> Ver 2 for a while, but they are major hurdles for newbies and
> upgraders.

A FAQ would be nice. In the meantime, have you read the PDF doc's on
sourceforge? They are quite good:

   http://prdownloads.sourceforge.net/tripwire/tripwire-2.3.0-docs-pdf.tar.gz

rjf&