1827293 Members
1598 Online
109717 Solutions
New Discussion

Tripwire and wildcards

 
Andrew Pollard
Super Advisor

Tripwire and wildcards

Hi,

I am using tripwire for the first time and I was wondering if I can use wildcards in the policy file "twpol.txt"?
Here is my entry in the file:
(
rulename = "Our Code",
severity = $(SIG_HI)
)
{
## /backups -> $(SEC_BIN) (recurse = 1) ;
/backups/test* -> $(SEC_BIN) (recurse = 1) ;
/opt/ifast.base.uat -> $(SEC_BIN) (recurse = 1) ;
}

I only want to monitor directories under /backups called test but I don't want to have to enter each line in the file.
When I update the active policy file, I get this warning:
Parsing policy file: /opt/iexpress/tripwire/etc/tw.pol
Generating the database...
*** Processing Unix File System ***
### Warning: File system error.
### Filename: /backups/test*
### No such file or directory
### Continuing...
Wrote database file: /opt/iexpress/tripwire/lib/tripwire/aimmigha.twd
The database was successfully generated.

The tripwire version is "A.09.00-2.4.1.2.002"
Are wildcards possible?

Thanks

Andrew