
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Using Tripwire
|
457
combination of uppercase and lowercase letters, punctuation (which can include
whitespace), and numerals.
If you install Tripwire from an RPM binary package, the main differ-
ence in your post-installation procedure from the one I just described
is that after you run rpm, you’ll need to run /etc/tripwire/twinstall.sh to
generate site and local passwords.
Configuring Tripwire
Justly or not, Tripwire has a reputation of being counterintuitive to configure. In my
opinion, the configuration syntax in Tripwire Version 2 is much simpler than Ver-
sion 1’s (which is yet another reason to run Tripwire Open Source rather than ASR).
Regardless, I think you’ll find the time you spend reading the next section and fine-
tuning Tripwire on your own systems to be well worth the effort.
Let’s examine the tasks necessary for Tripwire configuration and usage, one at a time.
Managing the configuration file
When you install Tripwire (whether via binary package or source build), a default
configuration file is created, /etc/tripwire/tw.cfg. You can’t edit this file because it’s an
encrypted binary, but for your convenience, a cleartext version of it, called twcfg.txt,
should also reside in /etc/tripwire. This is the file to change if you’ve had second
thoughts about any of the settings you