tripwire-dev — Discussion list for development of open source tripwire

[Tripwire-dev] Open Source Tripwire 2.4.3.1

[Brian C. <bc...@tr...>]

Hello again, a new Open Source Tripwire update is now available at: https://github.com/Tripwire/tripwire-open-source

Here's what the new update does:

* Fixes compilation errors with GCC 6.0.0 (the default compiler in Fedora 24).
* Revives OST's old 'twtest' unit test suite, and moves test code to src/twtest.
* Replaces tabs with spaces across the project. OST had come to have a mix of the two styles over time, and it turns out this often triggers GCC 6's new 'misleading indentation' warning.
* Fixes a variety of other compiler warnings, and enables "-Wextra" to show more warnings.

Enjoy,
  Brian Cox (bc...@tr...)

[Tripwire-dev] Open Source Tripwire 2.4.3.0

[Brian C. <bc...@tr...>]

Hello everyone, a new Open Source Tripwire update is now available at:  https://github.com/Tripwire/tripwire-open-source

Here's a quick summary of what's in the update:

* Fixes compilation errors on LLVM/clang and gcc 4.7+.
* Fixes platform-specific build errors on various platforms, including OpenBSD and Cygwin.
* Fixes an ugly defect around generating invalid SHA hash values.
* Fixes >2GB file support on platforms where it wasn't available previously, e.g. 32-bit Linux.
* Fixes blocking on mandatory file locks, via O_NONBLOCK.
* Adds a '-h' command line arg to display hash values as hex instead of base64.
* Adds the long-requested MAILFROMADDRESS config param, for email reporting.

If you need to report an issue, you may want to use the issue tracker on Github rather than the SourceForge site.  The SourceForge site isn't company-operated, and I won't necessarily see anything that's posted there.

Enjoy,
  Brian Cox (bc...@tr...)

[Tripwire-dev] add arch64* to config

[akuster808 <aku...@gm...>]

Please consider this patch at add aarch64 architecture to the config.sub.

- armin

[Tripwire-dev] powerpc64 build failure

[akuster808 <aku...@gm...>]

Hello,

the latest tripwire will not compile on powerpc64 as a host such is the 
case in Yocto based env.

the failure is:
  configure: error: /bin/sh ./config.sub powerpc64-poky-linux failed


The attached patch decodes the powerpc64 now.

regards,
Armin

Re: [Tripwire-dev] Patching Tripwire 2.4.2.2 to compile on OSX

[Barry A. <bar...@gm...>]

./configure CXXFLAGS='-stdlib=libstdc++’

Resolved. :)

On Dec 31, 2013, at 6:44 PM, Barry Allard <bar...@gm...> wrote:

> So there’s this error:
> 
> g++ -DHAVE_CONFIG_H      -I. -I. -I../.. -I..    -O -pipe -Wall -Wno-non-virtual-dtor -c -o displayencoder.o displayencoder.cpp
> displayencoder.cpp:831:27: error: calling a private constructor of class
>       'std::__1::__wrap_iter<const char *>'
>                 TSTRING::const_iterator first(&ach[0]), last(&ach[1]);
> 
> Any ideas on a simple, portable solution?  My C++ is rusty, but it looks like the code was written for an older STL.
> 
> More details: https://github.com/steakknife/tripwire/issues/1
> 
> Also, here’s the WIP fork since TW has been unmaintained for years: https://github.com/steakknife/tripwire
> 
> BR,
> Barry Allard

[Tripwire-dev] Patching Tripwire 2.4.2.2 to compile on OSX

[Barry A. <bar...@gm...>]

So there’s this error:

g++ -DHAVE_CONFIG_H      -I. -I. -I../.. -I..    -O -pipe -Wall -Wno-non-virtual-dtor -c -o displayencoder.o displayencoder.cpp
displayencoder.cpp:831:27: error: calling a private constructor of class
      'std::__1::__wrap_iter<const char *>'
                TSTRING::const_iterator first(&ach[0]), last(&ach[1]);

Any ideas on a simple, portable solution?  My C++ is rusty, but it looks like the code was written for an older STL.

More details: https://github.com/steakknife/tripwire/issues/1

Also, here’s the WIP fork since TW has been unmaintained for years: https://github.com/steakknife/tripwire

BR,
Barry Allard

[Tripwire-dev] error

[Carey B. <car...@me...>]

Integrity check complete.
crypto:~ careybalboa$ sudo tripwire --update
Password:
### Error: File could not be opened.
### Filename: /opt/local/var/db/tripwire/report/crypto.local-20130902-184531.twr
### No such file or directory
### Exiting...
crypto:~ careybalboa$ 


the files are there, i see them...
thanks

[Tripwire-dev] twcfg.txt for mac os x 10.8 or even 10.9?

[Carey B. <car...@me...>]

anybody have a good headstart config file for a base clean install of 10.8 or even upcoming 10.9?

or at least some advice on which sys dirs are most critical to watch???

thanks

[Tripwire-dev] email problem, unqualified address in from field

[Rejo Z. <tri...@su...>]

Hi there,

I am running Tripwire version 2.3.1.2.0-11 on a server running Ubuntu 
8.04 Hardy. The Tripwire is the default package as provided by Ubuntu.

It all seems to work very well, apart from a minor issue when Tripwire 
needs to send an e-mail. Whenever Tripwire sends an e-mail, it's unable 
to determine the fully qualified domainname and it will use the hostname 
on the right hand side of the e-mailaddress in the From field (it will 
use <tripwire@trillian> instead of <tri...@tr...>.  

These unqualified address are rejected by the mailserver. 

As far as I can tell from the source code, Tripwire uses gethostbyname 
to determine the FQDN. Apart from the code in Tripwire, this seems to be 
working correctly on the server:

 | root@trillian:~# uname -a
 | Linux trillian 2.6.24-19-server #1 SMP Wed Jun 18 14:44:47 UTC 2008 x86_64 GNU/Linux
 | 
 | root@trillian:~# uname -n
 | trillian
 | 
 | root@trillian:~# host trillian
 | trillian.krikkit.nl     A       195.169.98.217
 | 
 | root@trillian:~# host trillian.krikkit.nl
 | trillian.krikkit.nl     A       195.169.98.217
 | 
 | root@trillian:~# hostname
 | trillian
 | 
 | root@trillian:~# hostname -f
 | trillian.krikkit.nl
 | 
 | root@trillian:~# grep -v ^# /etc/host.conf 
 | order hosts,bind
 | multi on
 | 
 | root@trillian:~# cat /etc/hosts
 | 127.0.0.1       localhost.localdomain   localdomain
 | 195.169.98.217  trillian.krikkit.nl     trillian
 | 
 | root@trillian:~# grep search /etc/resolv.conf 
 | search krikkit.nl
 | 
 | root@trillian:~# perl -e 'print join(":", gethostbyname("trillian")); print "\n";'
 | trillian.krikkit.nl:trillian:2:4:A(C)bU

So, is there something I am overlooking, or is there actually a problem 
with the code doing a lookup?

Thanks a lot in advance, thank you for your help.

-- 
Rejo Zenger . <re...@ze...> . 0x75FC50F3 . <https://rejo.zenger.nl>
GPG encrypted e-mail prefered. 

[Tripwire-dev] Compile error with 2.4.1.2

[Didier G. <ld...@ul...>]

Compiling 2.4.1.2 on Tru64 v5.1b, g++ 4.0.2 and the native tru64 cc.

ar: Warning: ignoring second definition of _ZN8SecBlockItED1Ev defined in
archive
ar: Warning: ignoring second definition of
_ZN8SecBlockIN8CodeTree7ct_dataEED1Ev defined in archive
ln -f libcryptlib.a ../../lib/libcryptlib.a
Making all in core
g++ -DHAVE_CONFIG_H         -I. -I. -I../.. -I..   -I/usr/local/ssl/include
-I/usr/local/iconv/include  -I/usr/opt/TWWfsw/gcc402/include/c++ -g -D_ALPHA
-c -o file_unix.o file_unix.cpp
g++ -DHAVE_CONFIG_H         -I. -I. -I../.. -I..   -I/usr/local/ssl/include
-I/usr/local/iconv/include  -I/usr/opt/TWWfsw/gcc402/include/c++ -g -D_ALPHA
-c -o unixfsservices.o unixfsservices.cpp
unixfsservices.cpp: In member function 'virtual void
cUnixFSServices::GetHostID(TSTRING&) const':
unixfsservices.cpp:167: error: 'gethostid' was not declared in this scope
*** Exit 1
Stop.

I have the environment variables set as follows:

CC="cc"
CFLAGS="-O4"
CPPFLAGS="-I/usr/local/iconv/include"
CXXFLAGS="-I/usr/opt/TWWfsw/gcc402/include/c++"

I have iconv in its own directory, so that's why the flag is there, and gcc
is installed in its own directory not in the path, so I do have the PATH
variable also poiting to the gcc bin folder.

I include a couple of the lines starting with "ar: Warning" above, but there
are also many. I know those have nothing to do with the error, but maybe
there is a small detail to fix there, maybe a porting issue.

If I need to supply more troubleshooting info, let me know...

Thanks for any help fixing this,

-- 
Didier Godefroy
mailto:dg...@ul...

Re: [Tripwire-dev] Tripwire Universal

[W. W. G. <wwg...@au...>]

On Oct 16, 2006, at 9:45 PM, Ron Forrester wrote:
> I haven't. But if someone sends me a Macbook Pro, I promise to have it
> working in less than 30 days :-)

I have a week. I'll let y'all know how it goes. :-)


>  I am pretty sure it will build correctly on either endian
> if the proper flags are twiddled.

Excellent. Thanks. With luck, and the right set-up, I'm hoping that  
it won't be an issue.

W. W. Gilpin
wwg...@au...

Re: [Tripwire-dev] Tripwire Universal

[Ron F. <it...@gm...>]

On 10/16/06, W. W. Gilpin <wwg...@au...> wrote:
> Has anyone ever tried to build the Tripwire tools as universal
> binaries on OSX?

I haven't. But if someone sends me a Macbook Pro, I promise to have it
working in less than 30 days :-)

> Is there anything in particular that might be a stumbling block - for
> example places in the code that explicitly reference the endianness
> as determined by the configure script?

In src/code/platform.h you'll find some endian stuff. It's been a long
while since I did any platform ports of Tripwire, but that is where
I'd start. I am pretty sure it will build correctly on either endian
if the proper flags are twiddled.

Cheers,
-- 
rjf&

[Tripwire-dev] Tripwire Universal

[W. W. G. <wwg...@au...>]

Has anyone ever tried to build the Tripwire tools as universal  
binaries on OSX?

Is there anything in particular that might be a stumbling block - for  
example places in the code that explicitly reference the endianness  
as determined by the configure script?

W. W. Gilpin
wwg...@au...

Re: [Tripwire-dev] Policy files

[Chris J. <jo...@nm...>]

On Mon, 9 Oct 2006, Amias Channer wrote:

      Download an RPM or get the tarball.  Either should have a policy
file.    They did when I grabbed them.

> Hello All ,
>
> I am currently learning how to define policy files for tripwire with a
> view to deployment on RHEL4 . From the documentation and sniffing about
> on the net I got the impression that a lot of distros ship with a
> generalised tripwire policy which can be used a base for developing your
> own.
>
> Sadly redhat don't include tripwire in their enterprise distro anymore
> which means i have to start from scratch.  which leads me to the main
> point of my question ...
>
> Could anyone point me towards a repository of tripwire policies or share
> with me the magic of their existing RHEL4 policy ?
>
> Any help would be gratefully appreciated .
>
> Toodle-pip
> Amias
>
>

------------------------------------------------------------------------------- 
Chris Johnson               |Internet: jo...@nm...
Systems Administrator       |Web:      http://www.nmr.mgh.harvard.edu/~johnson
NMR Center                  |Voice:    617.726.0949
Mass. General Hospital      |FAX:      617.726.7422
149 (2301) 13th Street      |The longer you wait in line, the greater the
Charlestown, MA., 02129 USA |likelihood you are in the wrong line.  Q Principle
-------------------------------------------------------------------------------

[Tripwire-dev] Policy files

[Amias C. <ami...@me...>]

Hello All ,

I am currently learning how to define policy files for tripwire with a
view to deployment on RHEL4 . From the documentation and sniffing about
on the net I got the impression that a lot of distros ship with a
generalised tripwire policy which can be used a base for developing your
own.

Sadly redhat don't include tripwire in their enterprise distro anymore
which means i have to start from scratch.  which leads me to the main
point of my question ...

Could anyone point me towards a repository of tripwire policies or share
with me the magic of their existing RHEL4 policy ? 

Any help would be gratefully appreciated .

Toodle-pip
Amias

[Tripwire-dev] Problems with automake problems and when builddir is not srcdir

[Bernard L. <thi...@ho...>]

Dear List,
                        I can't find the live sources, though I see various 
references to CVS.
What follows is therefore based on the last release (2.4.0.1). Apologies for 
any
duplication.

(a) I assume the BLFS 'gcc 4'  patch has already been applied.  I attach a 
copy.
     tripwire-2.4.0.1-gcc4_build_fixes-1.patch

(b) gcc -pedantic -Wall gags (correctly) on many unwanted semicolons
     which have been put after function-type macro invocations.
     tripwire-2.4.0.1-bl12_gcc4-1.patch

(c) Even after cleaning up the sources, it still won't build if builddir != 
srcdir.
     Inspection showed that the $(top_builddir)/{bin,lib} directories were
     expected to be present already, but aren't (assuming a clean directory
     initially).
     After some threshing around, I decided that 'configure'/'config.status'
     was the best place to create them, so I did a little hacking on 
config.in .
     This is most graceless, and I suspect I'm missing a better way to do 
it.

     There is some mysterious tat in the old Makefiles which tests whether
     the target directory exists and simply stops if it doesn't.  Feel free 
to
     put this behaviour back if it has a use of some sort.
     tripwire-2.4.0.1-sepbuild-1.patch


(d) As I discovered while working on the previous patch, the autotools
     automagical actions require automake-1.8 .  I can move up to
     automake-1.9.6, after running aclocal.  Fine - but now several of
     the Makefiles end up with duplicate 'all:' targets, and make gags.
     Ho-hum... inspection revealed that the all: targets are really a
     mistake anyway.  What's wanted is an all-local target instead.

     The modifications for this are in
     tripwire-2.4.0.1-automake-1.patch

It all works for me now with
aclocal/automake from the automake-1.9.6 package.
My autoconf is 2.60
My m4 is from the GNU coreutils, version 5.97

   I hope this is useful to SOMEONE, I've
spent enough time on it...
                                                           Bernard Leak

_________________________________________________________________
Be the first to hear what's new at MSN - sign up to our free newsletters! 
http://www.msn.co.uk/newsletters

RE: [Tripwire-dev] Newbie question -- Securing Tripwire

[Eric L. <tri...@er...>]

That's a really slick way of doing things, but I'm just not sure I'm ready
to jump off that bridge yet. Maybe down the road I'll get some time to play
with Xen.

What I am thinking about doing at this point is moving the binaries and
key-files to a locked usb jump drive, and leaving the db on the hd. This
gives me secured binaries and key files, while still allowing me to update
the database remotely when known changes occur. 

I suppose I could put a copy of the database on the jump drive, but updating
the database on the jump drive is kind of a pain since the datacenter is a
~50 drive each way and when we bring up our redundant datacenter it's even
worse. I really don't want to have to go into the datacenter each time I
have a code release.

Am I way off base for doing things this way?

  

> -----Original Message-----
> From: tri...@li... 
> [mailto:tri...@li...] On Behalf 
> Of Steve Wray
> Sent: Saturday, February 18, 2006 12:51 PM
> To: Eric Langheinrich
> Cc: tri...@li...
> Subject: Re: [Tripwire-dev] Newbie question -- Securing Tripwire
> 
> Eric Langheinrich wrote:
> > I am just starting to work with tripwire and have a question about 
> > securing the check process.
> > 
> > Most of what I have read tells me that I need to store the 
> database on 
> > read-only media, but I seem to recall reading somewhere 
> that I really 
> > only need to store the binary, key files, and maybe the 
> > configuration/policy file on read only media. Obviously, 
> not having to 
> > store the database on read-only media is advantageous since 
> I can then 
> > update the database remotely when system changes are performed.
> > 
> > What is the right way to secure tripwire? Does the binary 
> check that 
> > the database is signed with the proper key when a 'tripwire 
> --check' 
> > is performed? Do I need to store that database on read-only media?
> 
> 
> Ok, so this may not work for everyone, but I may have found 
> the ultimate way to secure tripwire.
> 
> We use xen virtualisation.
> 
> The xen host mounts the virtual machines filesystem read-only 
> and tripwire running on the host checks the mounted filesystem.
> 
> The virtual machine has no tripwire installation at all, 
> nothing to be compromised.
> 
> The host doesn't even need to have an internet-facing network 
> connection (it needs a physical interface, but it doesn't 
> need to listen on it).
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep 
> through log files for problems?  Stop!  Download the new AJAX 
> search engine that makes searching your log files as easy as 
> surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&
dat=121642
> _______________________________________________
> Tripwire-dev mailing list
> Tri...@li...
> https://lists.sourceforge.net/lists/listinfo/tripwire-dev
> 

Re: [Tripwire-dev] Newbie question -- Securing Tripwire

[Steve W. <ste...@pa...>]

Eric Langheinrich wrote:
> I am just starting to work with tripwire and have a question about securing
> the check process.
> 
> Most of what I have read tells me that I need to store the database on
> read-only media, but I seem to recall reading somewhere that I really only
> need to store the binary, key files, and maybe the configuration/policy file
> on read only media. Obviously, not having to store the database on read-only
> media is advantageous since I can then update the database remotely when
> system changes are performed.
> 
> What is the right way to secure tripwire? Does the binary check that the
> database is signed with the proper key when a 'tripwire --check' is
> performed? Do I need to store that database on read-only media?


Ok, so this may not work for everyone, but I may have found the ultimate
way to secure tripwire.

We use xen virtualisation.

The xen host mounts the virtual machines filesystem read-only and
tripwire running on the host checks the mounted filesystem.

The virtual machine has no tripwire installation at all, nothing to be
compromised.

The host doesn't even need to have an internet-facing network connection
(it needs a physical interface, but it doesn't need to listen on it).

[Tripwire-dev] Newbie question -- Securing Tripwire

[Eric L. <tri...@er...>]

I am just starting to work with tripwire and have a question about securing
the check process.

Most of what I have read tells me that I need to store the database on
read-only media, but I seem to recall reading somewhere that I really only
need to store the binary, key files, and maybe the configuration/policy file
on read only media. Obviously, not having to store the database on read-only
media is advantageous since I can then update the database remotely when
system changes are performed.

What is the right way to secure tripwire? Does the binary check that the
database is signed with the proper key when a 'tripwire --check' is
performed? Do I need to store that database on read-only media?

Thanks in advance!

Re: [Tripwire-dev] build question v2.4.0.1 on solaris 9 and hpux11.11

[Ron F. <it...@gm...>]

On 1/10/06, Ran Li <Ra...@rt...> wrote:
> Thanks for looking into this, actually it was a while ago, and one of
> the list member Ron provided patches from you and it works. I don't know
> how this just be posted again to the list, anyway, appreciate your
> reply.

It came through as an administrative request (msg too big) just last
night -- sorry, I didn't check the original date I just blindly
allowed it once I realized it wasn't spam (the list gets a lot of spam
that I reject each day).

Some kind of wackiness on SF's side.

--
rjf&

RE: [Tripwire-dev] build question v2.4.0.1 on solaris 9 and hpux11.11

[Ran L. <Ra...@rt...>]

Hi Paul,

Thanks for looking into this, actually it was a while ago, and one of
the list member Ron provided patches from you and it works. I don't know
how this just be posted again to the list, anyway, appreciate your
reply.

Regards,

Ran

>>>>>>>>>>>>>>>>>>>>

-----Original Message-----
From: tri...@li...
[mailto:tri...@li...] On Behalf Of Ron
Forrester
Sent: Thursday, December 22, 2005 1:47 PM
To: Ran Li
Cc: tri...@li...
Subject: Re: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


On 12/22/05, Ran Li <Ra...@rt...> wrote:
> fconameinfo.h:46: warning: 'class iFCONameInfo' has virtual functions=20
> but non-virtual destructor
> fconame.h:147: error: ISO C++ forbids declaration of 'cFCOName_i' with

> no type
> fconame.h:147: error: expected ';' before '*' token
> *** Error exit code 1
>
> Stop.
> *** Error exit code 1

This should be fixed when I apply Paul's latest patch (included below if
you want to apply it)


-- ./src/fco/fcosetimpl.h.orig 2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fcosetimpl.h      2005-12-14 06:18:01.000000000 -0600
@@ -46,6 +46,8 @@
 #include "fconame.h"
 #endif

+class cFCOIterImpl;
+
 class cFCOSetImpl : public iFCOSet
 {
       friend class cFCOIterImpl;
--- ./src/fco/fconame.h.orig    2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fconame.h 2005-12-14 06:18:01.000000000 -0600
@@ -49,6 +49,7 @@
////////////////////////////////////////////////////////////////////////
///////
 class cFCONameTblNode;
 class cFCONameIter;
+class cFCOName_i;

 class cFCOName : public iTypedSerializable
 {
--- ./src/tw/fcoreport.h.orig   2005-12-14 06:18:01.000000000 -0600
+++ ./src/tw/fcoreport.h        2005-12-14 06:21:41.000000000 -0600
@@ -85,6 +85,7 @@
 class cFileHeaderID;
 class cErrorQueue;
 class cFCOReportGenreHeader;
+class cFCOReportSpecIter;

 class cFCOReport : public iTypedSerializable
 {
>>>>>>>>>>>>>>>>>>


-----Original Message-----
From: Paul Herman [mailto:ph...@fr...]=20
Sent: Tuesday, January 10, 2006 12:58 PM
To: Ran Li
Cc: tri...@li...
Subject: Re: [Tripwire-dev] build question v2.4.0.1 on solaris 9 and
hpux11.11


On Wed, 21 Dec 2005, Ran Li wrote:

> Hello all,
>
> when I tried to build tripwire 2.4.0.1 on solaris 9 and hpux 11.11,=20
> got some problems, anybody can point out which argument I should use=20
> for the configure or how to setup the env. config.log attached.=20
> Thanks.
>
> solaris 9 with gcc 3.4.1
> hpux 11.11 with gcc 4.0.2

Hi Ran,

Hmmm, I must be not seeing something right, but I don't see=20
anything obvious in the config.log files.  What are the errors that=20
./configure spews out on each machine?  On which check do they die?

-Paul.

Re: [Tripwire-dev] build question v2.4.0.1 on solaris 9 and hpux11.11

[Paul H. <ph...@fr...>]

On Wed, 21 Dec 2005, Ran Li wrote:

> Hello all,
>
> when I tried to build tripwire 2.4.0.1 on solaris 9 and hpux 11.11, got
> some problems, anybody can point out which argument I should use for the
> configure or how to setup the env. config.log attached. Thanks.
>
> solaris 9 with gcc 3.4.1
> hpux 11.11 with gcc 4.0.2

Hi Ran,

Hmmm, I must be not seeing something right, but I don't see 
anything obvious in the config.log files.  What are the errors that 
./configure spews out on each machine?  On which check do they die?

-Paul.

[Tripwire-dev] new release coming...

[Ron F. <it...@gm...>]

I have patched my local tree with Paul's (gcc 4 and solaris studio 8)
and Gilpin's (parserhelper cleanup fix) patches.

Currently I am working on getting "make install" to do the right
thing, then I will make a release. Probably be a week or so.

Cheers,
--
rjf&

[Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and hpux11.11

[Ran L. <Ra...@rt...>]

Hello all,

Fixed problem by applying HP-UX patch PHSS_33033 for ld.

thanks for the attention.

Regards!

-----Original Message-----
From: tri...@li...
[mailto:tri...@li...] On Behalf Of Ran Li
Sent: Thursday, December 22, 2005 7:48 PM
To: tri...@li...
Cc: Ron Forrester
Subject: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


on bellow hosts when I tried to build ... (after applying the patches)

on the first host

/usr/ccs/bin/ld: Unsatisfied symbols:
   __cxa_get_exception_ptr (first referenced in
../../lib/libtripwire.a(archive.o)) (code)
collect2: ld returned 1 exit status
*** Error exit code 1

Stop.

on the sencond host

/usr/ccs/bin/ld: (Warning) At least one PA 2.0 object file
(stdtwprint.o) was detected. The linked output may not run on a PA 1.x
system.
/usr/ccs/bin/ld: Unrecognized argument: +init
/usr/ccs/bin/ld: Usage:  /usr/ccs/bin/ld [options] [flags] files
collect2: ld returned 1 exit status
*** Error exit code 1

Stop.


any suggestions? Thanks.

Regards!




-----Original Message-----
From: Ran Li=20
Sent: Thursday, December 22, 2005 6:01 PM
To: tri...@li...
Cc: 'Ron Forrester'
Subject: RE: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


Hi Ron and all,

thanks for the reply, I successfully built the binary on hpux11.11
platform.

However when I tried to install it to another two hpux hosts I got
following error, I m not sure if openssl would be the matter, the one I
used to build this package uses openssl 0.9.8e

on one host with openssl 0.9.7e
# ./twadmin --generate-keys --site-keyfile /etc/tripwire/site.key
--site-passphrase passphrase                      =20
Generating key (this may take several minutes).../usr/lib/dld.sl:
Unresolved symbol: __umoddi3 (code)  from ./twadmin Software interrupt
forced exit: Abort

on the other host with openssl 0.9.8e (same version as the built host) #
./twadmin --generate-keys --site-keyfile /etc/tripwire/site.key
--site-passphrase passphrase=20
Memory fault(coredump)

# ldd twadmin | sort -u  (same output)
        /usr/lib/libc.2 =3D>      /usr/lib/libc.2
        /usr/lib/libdld.2 =3D>    /usr/lib/libdld.2
        /usr/lib/libm.2 =3D>      /usr/lib/libm.2
        /usr/local/lib/libcrypto.sl =3D>  /usr/local/lib/libcrypto.sl
        /usr/local/lib/libstdc++.sl =3D>  /usr/local/lib/libstdc++.sl

could you provide a clue to start troubleshoot? Thanks.

Regards!


-----Original Message-----
From: tri...@li...
[mailto:tri...@li...] On Behalf Of Ron
Forrester
Sent: Thursday, December 22, 2005 1:47 PM
To: Ran Li
Cc: tri...@li...
Subject: Re: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


On 12/22/05, Ran Li <Ra...@rt...> wrote:
> fconameinfo.h:46: warning: 'class iFCONameInfo' has virtual functions=20
> but non-virtual destructor
> fconame.h:147: error: ISO C++ forbids declaration of 'cFCOName_i' with

> no type
> fconame.h:147: error: expected ';' before '*' token
> *** Error exit code 1
>
> Stop.
> *** Error exit code 1

This should be fixed when I apply Paul's latest patch (included below if
you want to apply it)


-- ./src/fco/fcosetimpl.h.orig 2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fcosetimpl.h      2005-12-14 06:18:01.000000000 -0600
@@ -46,6 +46,8 @@
 #include "fconame.h"
 #endif

+class cFCOIterImpl;
+
 class cFCOSetImpl : public iFCOSet
 {
       friend class cFCOIterImpl;
--- ./src/fco/fconame.h.orig    2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fconame.h 2005-12-14 06:18:01.000000000 -0600
@@ -49,6 +49,7 @@
////////////////////////////////////////////////////////////////////////
///////
 class cFCONameTblNode;
 class cFCONameIter;
+class cFCOName_i;

 class cFCOName : public iTypedSerializable
 {
--- ./src/tw/fcoreport.h.orig   2005-12-14 06:18:01.000000000 -0600
+++ ./src/tw/fcoreport.h        2005-12-14 06:21:41.000000000 -0600
@@ -85,6 +85,7 @@
 class cFileHeaderID;
 class cErrorQueue;
 class cFCOReportGenreHeader;
+class cFCOReportSpecIter;

 class cFCOReport : public iTypedSerializable
 {


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems?  Stop!  Download the new AJAX search engine that
makes searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id=16865&op=3Dick
_______________________________________________
Tripwire-dev mailing list
Tri...@li...
https://lists.sourceforge.net/lists/listinfo/tripwire-dev


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems?  Stop!  Download the new AJAX search engine that
makes searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id=16865&op=3Dick
_______________________________________________
Tripwire-dev mailing list
Tri...@li...
https://lists.sourceforge.net/lists/listinfo/tripwire-dev

[Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and hpux11.11

[Ran L. <Ra...@rt...>]

on bellow hosts when I tried to build ... (after applying the patches)

on the first host

/usr/ccs/bin/ld: Unsatisfied symbols:
   __cxa_get_exception_ptr (first referenced in
../../lib/libtripwire.a(archive.o)) (code)
collect2: ld returned 1 exit status
*** Error exit code 1

Stop.

on the sencond host

/usr/ccs/bin/ld: (Warning) At least one PA 2.0 object file
(stdtwprint.o) was detected. The linked output may not run on a PA 1.x
system.
/usr/ccs/bin/ld: Unrecognized argument: +init
/usr/ccs/bin/ld: Usage:  /usr/ccs/bin/ld [options] [flags] files
collect2: ld returned 1 exit status
*** Error exit code 1

Stop.


any suggestions? Thanks.

Regards!




-----Original Message-----
From: Ran Li=20
Sent: Thursday, December 22, 2005 6:01 PM
To: tri...@li...
Cc: 'Ron Forrester'
Subject: RE: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


Hi Ron and all,

thanks for the reply, I successfully built the binary on hpux11.11
platform.

However when I tried to install it to another two hpux hosts I got
following error, I m not sure if openssl would be the matter, the one I
used to build this package uses openssl 0.9.8e

on one host with openssl 0.9.7e
# ./twadmin --generate-keys --site-keyfile /etc/tripwire/site.key
--site-passphrase passphrase                      =20
Generating key (this may take several minutes).../usr/lib/dld.sl:
Unresolved symbol: __umoddi3 (code)  from ./twadmin Software interrupt
forced exit: Abort

on the other host with openssl 0.9.8e (same version as the built host) #
./twadmin --generate-keys --site-keyfile /etc/tripwire/site.key
--site-passphrase passphrase=20
Memory fault(coredump)

# ldd twadmin | sort -u  (same output)
        /usr/lib/libc.2 =3D>      /usr/lib/libc.2
        /usr/lib/libdld.2 =3D>    /usr/lib/libdld.2
        /usr/lib/libm.2 =3D>      /usr/lib/libm.2
        /usr/local/lib/libcrypto.sl =3D>  /usr/local/lib/libcrypto.sl
        /usr/local/lib/libstdc++.sl =3D>  /usr/local/lib/libstdc++.sl

could you provide a clue to start troubleshoot? Thanks.

Regards!


-----Original Message-----
From: tri...@li...
[mailto:tri...@li...] On Behalf Of Ron
Forrester
Sent: Thursday, December 22, 2005 1:47 PM
To: Ran Li
Cc: tri...@li...
Subject: Re: [Tripwire-dev] RE: build question v2.4.0.1 on solaris 9 and
hpux11.11


On 12/22/05, Ran Li <Ra...@rt...> wrote:
> fconameinfo.h:46: warning: 'class iFCONameInfo' has virtual functions
> but non-virtual destructor
> fconame.h:147: error: ISO C++ forbids declaration of 'cFCOName_i' with

> no type
> fconame.h:147: error: expected ';' before '*' token
> *** Error exit code 1
>
> Stop.
> *** Error exit code 1

This should be fixed when I apply Paul's latest patch (included below if
you want to apply it)


-- ./src/fco/fcosetimpl.h.orig 2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fcosetimpl.h      2005-12-14 06:18:01.000000000 -0600
@@ -46,6 +46,8 @@
 #include "fconame.h"
 #endif

+class cFCOIterImpl;
+
 class cFCOSetImpl : public iFCOSet
 {
       friend class cFCOIterImpl;
--- ./src/fco/fconame.h.orig    2005-12-14 06:18:01.000000000 -0600
+++ ./src/fco/fconame.h 2005-12-14 06:18:01.000000000 -0600
@@ -49,6 +49,7 @@
////////////////////////////////////////////////////////////////////////
///////
 class cFCONameTblNode;
 class cFCONameIter;
+class cFCOName_i;

 class cFCOName : public iTypedSerializable
 {
--- ./src/tw/fcoreport.h.orig   2005-12-14 06:18:01.000000000 -0600
+++ ./src/tw/fcoreport.h        2005-12-14 06:21:41.000000000 -0600
@@ -85,6 +85,7 @@
 class cFileHeaderID;
 class cErrorQueue;
 class cFCOReportGenreHeader;
+class cFCOReportSpecIter;

 class cFCOReport : public iTypedSerializable
 {


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log
files for problems?  Stop!  Download the new AJAX search engine that
makes searching your log files as easy as surfing the  web.  DOWNLOAD
SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id=16865&op=3Dick
_______________________________________________
Tripwire-dev mailing list
Tri...@li...
https://lists.sourceforge.net/lists/listinfo/tripwire-dev