tripwire dumbness
so tripwire is at least one step towards security. fair product, fair
configuration and all that, but why is it so darn stupid. so by
concept, it should mail root iff changes are found. not otherwise. but
i get a mail every day which states that
/usr/lib/tripwire/tw.db_hostname is updated. well, doh!
tripwire -initialize
76% through it hits and records the stats for that file
100% through it writes it's own file from memory
of course it has changed. but doing a tripwire -update or tripwire
-interactive doesn't really get rid of it.
so i want that notification that the db has been updated, but i want
it once. or at least i want a way to get rid of it after i
acknowledged it that friday night i actually spent time at the
terminal and not with my significant other. oh wait, i don't have one.
anyone with a clue (pertaining to this issue)?
martin
[greetings from the heart of the sun]# echo madduck@!#:1:s@\@@@.net
--
"it appears that pl/i (and its dialects) is, or will be, the most widely
used higher level language for systems programming."
-- j. sammet
Reply to: