Here's partial output. The command I ran with strace was: strace /usr/loca/bin/tripwire -m i This initializes the tripwire database. I include what I think is the relevant output here: lstat("/ora", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 write(1, "The object: \"/ora\" is on a diffe"..., 61) = 61 lstat("/selinux", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/selinux", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 getdents(4, /* 2 entries */, 32768) = 48 getdents(4, /* 0 entries */, 32768) = 0 close(4) = 0 lstat("/srv", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/srv", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 getdents(4, /* 2 entries */, 32768) = 48 getdents(4, /* 0 entries */, 32768) = 0 close(4) = 0 I looked at the lstat man page, and there is a blurb on how it treats symbolic links as individual files. But /ora isn't a symbolic link. === Al ----- Original Message ---- From: Corey Chandler <lists@xxxxxxxxxxxxxxx> To: CentOS mailing list <centos@xxxxxxxxxx> Sent: Wed, November 4, 2009 10:06:58 AM Subject: Re: Tripwire Question Al Sparks wrote: > I'm trying to run tripwire on a RHEL 5.4 box. I'm new to it. > > RHEL != CentOS. That said, what happens when you strace tripwire? -- Corey / KB1JWQ _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos