Topic: Tripwire

[Tom Carroll]

I have installed tripwire on my essg and have found that ip-change is run weekly by crontab and makes quite a few changes on the system.

Is the ip-change weekly job necessary for my system if I'm on a fixed IP?

Seeing these waringings from Tripwire for the first time made my stomach turn upside down, until I realized it was the ip-change job that was doing it.

Thanks!

Tom

[aniston]

hello Tom,

just a general and curious question, how exactly did you analyze the logs of the tripwire program and can the logs be sent via e-mail to the admin of the system.

thanks in advance,
aniston

[Tom Carroll]

I set up Tripwire to run each evening with a command line 'tripwire --check' and you can configure to e-mail a copy of the security report to anyone.

When you run tripwire with the --check option it will run an integrity check of the files as outlined in your tw.pol file.

Eventhough essg is the BEST, I wanted to add another layer of security to my server.

Tom

[Chris Smith]

Tom,

Have you had continued success? Are you able to use Tripwire with SME V5?

Thanks,
Chris