tripwire: warning file not found...duh.

[Blaqb0x]

Hi,

I initialized the tripwire database. In my daily reports I get a long list fo files and directories that were not found. of course, when I try to find them they definitely not there. but were they ever there?

this is in the daily report.

___________________
### Filename: /sbin/busybox
### No such file or directory
### Continuing...
### Warning: File system error.
### Filename: /sbin/busybox.anaconda
### No such file or directory
### Continuing...
### Warning: File system error.
### Filename: /sbin/ftl_check
### No such file or directory
### Continuing...
### Warning: File system error.
### Filename: /sbin/ftl_format
### No such file or directory
-----------------------------------------------------------------------

Anyone know why. Also if suppose I re-initialize the database how could I save the previous one so I can compare the two?

thanx,

[Stix]

Hello,
I had the same thing happen to me. IIRC I had to comment out the files that don't exist on my system in the twpol.txt file. If you deleted that file (like they say your supposed to) you can regenerate it with

twadmin --print-polfile > /etc/tripwire/twpol.txt

Make your changes and then generate a new tw.pol file.

Actually here some info on the subject
http://www.redhat.com/docs/manuals/l...te-policy.html

HTH,

Stix