Mike Vanecek wrote: > ---------- Original Message ----------- > From: Michael Fratoni <mfratoni@tuxfan.homeip.net> > To: psyche-list@redhat.com > Sent: Tue, 14 Jan 2003 21:18:26 -0500 > Subject: Re: Tripwire > >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> On Tuesday 14 January 2003 05:10 pm, Mike Vanecek wrote: >>> After doing putting in emailto = root in a dozen places in >>> twpol.txt, running the twinstall.sh script, and doing a tripwire -m >>> c, not surprisingly I get a report of about 150 file exceptions. I >>> just hate the thought of going through and manually editing >>> (commenting out) those exceptions in the twpol.txt file and >>> updating. I have tried the >>> -I option, read the doco 4 times, and searched google and >>> tripwire.org for information. >>> >>> Does a simpler method of correcting the twpol.txt file exist than >>> just sitting down with the exception report and manually editing. >>> What a pain! >>> >>> Thanks, Mike. >> >> Not that I am aware of. The stock policy file included assumes that >> all packages from the distro are installed. >> >> My solution was to print the report and spend some time editing >> manually. > > I was worried you would say that. After installing a couple of > systems, editing out 170+ lines is a real pain. I tried the -I > interactive mode with hopes that would work, but nada. > > Regards, Mike. Go to your /var/lib/tripwire/report directory. Do a ls -lrt. The last file displayed is the latest tripwire report. Do a tripwire --update --twrfile <filename> where filename is the file from the listing. After a few seconds, the exceptions will be brought up in vim, where you can look through them or edit them. Do a :x when you are satisfied and you are done. Pretty easy. JMF James Francis TechRx Inc. 530 Lindbergh Dr. Coraopolis, Pa. 15108 Phone: (412) 474-1078 Fax: (412) 474-1074 -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
