Have you added more directories into the actual tripwire config
file(/etc/tw.config)?
We used his .rpm as well on a RH 6.0 box - from the install it worked fine,
but once we started adding more directories into the config file, it would
occasionally segfault. After doing our own research on the net, apparently,
the segfaulting is a problem with that version of tripwire and its handling
of a large amount of files.
After playing around with it, we've gotten a working tripwire with the
following directories:
# exclude all of /proc
=/proc E
#=/dev @@DIRM
/dev @@DEVM
#=/etc @@DIRM
/etc @@CONFM
# Binary directories
#=/usr/sbin @@DIRM
/usr/sbin @@BINM
#=/usr/bin @@DIRM
/usr/bin @@BINM
#=/sbin @@DIRM
/sbin @@BINM
#=/bin @@DIRM
/bin @@BINM
#=/lib @@DIRM
/lib @@BINM
#=/usr/lib @@DIRM
/usr/lib @@BINM
=/usr/src E
=/home/httpd/html E
/boot R
/bru R
/home R
/root R
/usr/etc R
/usr/local R
=/tmp @@DIRM
Kevin Hemenway
-- -----------------------------------------------------------------
Total Net NH, LLC EMAIL: <[EMAIL PROTECTED]>
15 Pleasant St., Suite 11 WEBSITE: <http://www.totalnetnh.net/>
Concord, NH 03301 PHONE: (603) 225-8422
--------------------------------------------------------------------
----- Original Message -----
From: WH Bouterse <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, November 16, 1999 3:36 PM
Subject: Tripwire Segfault
> With RH 6.1/L-M 6.1 and Chuck Moons Tripwire rpm
> I install it and things seemed to go okay initially
>
> However it keeps segfaulting.
> I am probably missing something very obvious.
> It could have been in the man,HOwto,FAQ etc but they have all merged
> together in my thought processes with a few thousand pages of
> other Linux info. !!
>
> Date: Tue, 16 Nov 1999 04:30:30 -0900
>
> /etc/cron.daily/tripwire.verify: line 17: 28582 Segmentation fault
> +/usr/sbin/tripwire -loosedir -q
> 28583 Done | ( cat <<EOF
> This is an automated report of possible file integrity changes,
> generated by
> the Tripwire integrity checker. To tell Tripwire that a file or entire
> directory tree is valid, as root run:
>
> /usr/sbin/tripwire -update [pathname|entry]
>
> If you wish to enter an interactive integrity checking and verification
> session, as root run:/usr/sbin/tripwire -interactive
>
> Changed files/directories include:
> EOF
> cat )
> 28584 Done | /bin/mail -s "File integrity
> report" root
>
>
> [root@home /root]# tripwire -interactive
> ### Warning: creating ./databases directory!
> ###
> ### Phase 1: Reading configuration file
> ### Phase 2: Generating file list
> ### Phase 3: Creating file information database
> Segmentation fault
> [root@home /root]#
>
> William Bouterse
> Juneau Alaska
>
>
> --
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.
>
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
