[Tripwire-announce] Tripwire fine tunning help

[Tasha S. <tas...@ya...>]

Hiii,

Im running RedHat 7.3(2.4.20) And tripwire-2.3-47.  I set it up using this tutorial 

which i think is the easiest to understand and the best one i found

 http://www.linuxsecurity.com/feature_stories/tripwire-2.html for anyone else who 

needs a lil help'

Ok my problem is when tripwire sends a report with still a lot of stuff that i dont want 

it to 

check like:    

"/root/.mozilla/default/5w5t16dp.slt/Cache/954B5EAFd01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/6B44F853d01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/1159246Cd01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/B807E0B0d01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/F1F0843Ed01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/EC280860d01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/B33C0B14d01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/209389F6d01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/A7B74D2Bd01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/72A96B0Ad01"
"/root/.mozilla/default/5w5t16dp.slt/Cache/7DC5BFAEd01"


 

"/usr/lib/python2.2/test/output/test_compare"
"/usr/lib/python2.2/test/output/test_compile"
"/usr/lib/python2.2/test/output/test_cookie"
"/usr/lib/python2.2/test/output/test_extcall"
"/usr/lib/python2.2/test/output/test_frozen"
"/usr/lib/python2.2/test/output/test_future"
"/usr/lib/python2.2/test/output/test_gettext"
"/usr/lib/python2.2/test/output/test_global"
"/usr/lib/python2.2/test/output/test_httplib"
"/usr/lib/python2.2/test/output/test_threadedtempfile"
"/usr/lib/python2.2/test/output/test_longexp"
"/usr/lib/python2.2/test/output/test_mimetools"
"/usr/lib/python2.2/test/output/test_mmap"
"/usr/lib/python2.2/test/output/test_openpty"
"/usr/lib/python2.2/test/output/test_poll"
"/usr/lib/python2.2/test/output/test_posixpath"
"/usr/lib/python2.2/test/output/test_profile"


 

The log gets quite full with all this stuff how do i edit my

 

 policy file soo it stops checking these files cause i think 

 

all they are is my cahce files from surfing: Thanks guys 



 



---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now