Re: Tripwire
David Baron wrote:
> On Friday 10 September 2004 20:01,
> debian-user-digest-request@lists.debian.org wrote:
>> > This is a file-system integrity checker, will detect hacks,
>> > intrusions, etc. I tried it but seems to find lots of stuff that
>> > seem part of the dynamics of the ongoing system operation
>>
>> There is an exclusion list.
>
> I haven't found one but I assume it gets placed in the "policy" file.
> Attempts to change policy fail because of all the "errors" and "changed
> items" that I want to get rid of--catch 22, it seems.
This might be helpful:
"The tripwire command has a policy update mode which means that a change in
policy does not require us to reinitialise the database. The policy update
mode simply synchronises the existing database with the new policy file."
http://linuxgazette.net/106/odonovan.html
Adam
Reply to: