-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 04 February 2003 08:10 pm, Tasha Smith wrote: [snip] > Ok my problem is when tripwire sends a report with still a lot of stuff > that i dont want > > it to > > check like: > > "/root/.mozilla/default/5w5t16dp.slt/Cache/954B5EAFd01" [snip]
Don't run Mozilla as root, and you won't see these. If you are running Mozilla as root, you're probably running X as root as well? Not a good idea. Routinely logging in as root isn't a good idea. Tripwire monitors /root/* by default, because normally changes there are not expected. > "/usr/lib/python2.2/test/output/test_compare" > "/usr/lib/python2.2/test/output/test_compile" [snip] Are you or some process creating these files? I don't have a /usr/lib/python2.2/test/ directory here. Tripwire should monitor /usr/lib/ for unexpected changes. That's it's purpose in life. If these are files you are creating, perhaps consider doing it in /home/some_non_root_user/ > The log gets quite full with all this stuff how do i edit my > policy file soo it stops checking these files like this: If these files are supposed to have changed, and don't change all the time, you can update the database, and they will be accepted on the next check. Once accepted, tripwire will no longer complain about them. Something like: 'tripwire --update -a -r /var/lib/tripwire/report/name_of_report' - -- - -Michael pgp key: http://www.tuxfan.homeip.net:8080/gpgkey.txt Red Hat Linux 7.{2,3}|8.0 in 8M of RAM: http://www.rule-project.org/ - -- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE+QHR/n/07WoAb/SsRAvzkAJ9GYTb503vITHafGa13mmV7yeBusgCgj6Bl XBDqfV2ebT2AianPIY1ImEc= =BfoT -----END PGP SIGNATURE----- -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
