so tripwire is at least one step towards security. fair product, fair configuration and all that, but why is it so darn stupid. so by concept, it should mail root iff changes are found. not otherwise. but i get a mail every day which states that /usr/lib/tripwire/tw.db_hostname is updated. well, doh!
tripwire -initialize 76% through it hits and records the stats for that file 100% through it writes it's own file from memory of course it has changed. but doing a tripwire -update or tripwire -interactive doesn't really get rid of it. so i want that notification that the db has been updated, but i want it once. or at least i want a way to get rid of it after i acknowledged it that friday night i actually spent time at the terminal and not with my significant other. oh wait, i don't have one. anyone with a clue (pertaining to this issue)? martin [greetings from the heart of the sun]# echo [EMAIL PROTECTED]:1:[EMAIL PROTECTED]@@@.net -- "it appears that pl/i (and its dialects) is, or will be, the most widely used higher level language for systems programming." -- j. sammet