topic Re: Tripwire on RedHat Linux 9 in Operating System - Linux

Tripwire on RedHat Linux 9

ginnie nuckles_1 — Fri, 18 Jul 2003 15:03:18 GMT

I have installed the opensource of Tripwire on a Redhat 9 system. It appears not to be reading the twcfg file but is using default values somewhere.. The bottom line is this .. when I try to run tripwire --check it generates this funky email from cron... I dont want that and I dont know how to stop it. note. the emailto parameter they say to use in the policy file also does nothing of value ?? stumped . .thanks

Re: Tripwire on RedHat Linux 9

Steven E. Protter — Fri, 18 Jul 2003 15:39:15 GMT

crontab -e

Comment out the line with tripwire on it.

That will stop it from running.

It would seem however that the command put into cron has been malformed for some reason.

Copy the command out of cron, work with it on the command line until it does what you want(mailx, mail whatever) and then modify the command line in crontab

Its a very useful security tool and worth it to get it running.

SEP

Re: Tripwire on RedHat Linux 9

Jerome Henry — Fri, 18 Jul 2003 15:55:59 GMT

I agree with SEP, Tripwire is a great tool. If deleting cron job doesn't fix, try to reinstall cleanly. Your cron job seems indeed odd.

Here's a good summary on tripwire install and personnlisation :

http://www.europe.redhat.com/documentation/rhl9/rhl-rg-en-9/ch-tripwire.php3

hth

J