Re: [tlug] Tripwire - any tips.

[Jim Breen <jwb@example.com>]

[Michael Doughty (Re: [tlug] Tripwire - any tips.) writes:]
>> On Tue, 25 Jun 2002 09:22:20 +1000 (EST), Jim Breen wrote:
>> > Has anyone got some tips on how to configure tripwire so that it produces
>> > useful results?
>[snip]
> 
>> You need to edit your /etc/tripwire/twpol.txt file and run
>> tripwire --update-policy
>> 
>> Basically, sit down with a copy of the report that your are receiving and
>> if the file doesn't exist on your system, strip it out of the twpol.txt
>> file.  
>> Once the policy has been updated, I think I usually run 
>> tripwire --init to create a database that is synced with the new
>> policy file.

Thanks. Just what I wanted to know.

Jim

-- 
Jim Breen  (j.breen@example.com  http://www.csse.monash.edu.au/~jwb/)
Computer Science & Software Engineering,                Tel: +61 3 9905 3298
P.O Box 26, Monash University,                          Fax: +61 3 9905 5146
Clayton VIC 3800, Australia      $B%8%`!&%V%j!<%s(B@$B%b%J%7%eBg3X(B