 |
| Register | FAQ | Members List | Calendar | Links | Search | Today's Posts | Mark Forums Read |
|
||||||||
|
|
#1
02-10-2006, 02:47 AM
|
Check with tripwire
Dear all,
I just installed redhat 9, and check with tripwire, However, the following report shows that there are a lot of folders or files not existing with no integrity. Why? Please give me helping hand, thanks Regards, Simon /etc/cron.daily/tripwire-check: Parsing policy file: /etc/tripwire/tw.pol *** Processing Unix File System *** Performing integrity check... ### Warning: File system error. ### Filename: /proc/scsi ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/fsck.minix ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/mkfs.bfs ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/mkfs.minix ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/update ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/dhcpcd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/ipvsadm ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/ipvsadm-restore ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/ipvsadm-save ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /sbin/raidhotgenerateerror ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ipchains ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ipvsadm ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ypbind ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/amd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/arpwatch ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/autofs ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/bcm5820 ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/bgpd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/bootparamd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/cWnn ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/dhcpd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/firewall ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/freeWnn ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/gated ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/identd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/innd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/irda ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/iscsi ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/isdn ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/junkbuster ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/kadmin ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/kprop ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/krb524 ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/krb5kdc ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/kWnn ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ldap ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/linuxconf ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/lpd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/mars_nwe ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/mcserv ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/nfs ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/nscd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ospf6d ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ospfd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/pcmcia ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/postgresql ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/pxe ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/radvd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rarpd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/reconfig ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rhnsd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ripd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ripngd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/routed ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rstatd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rusersd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rwalld ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/rwhod ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/smb ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/snmpd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/squid ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/tux ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/tWnn ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ups ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/vncserver ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/wine ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/yppasswdd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ypserv ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/ypxfrd ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /var/lock/subsys/zebra ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /etc/tripwire/localhost-local.key ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /bin/gawk-3.1.0 ### No such file or directory ### Continuing... ### Warning: File system error. ### Filename: /bin/zsh-4.0.2 ### No such file or directory ### Continuing... Simon Lee 
|
|
#2
02-10-2006, 10:37 PM
|
|||
|
|||
|
Re: Check with tripwire
Simon Lee wrote:
> Dear all, > > I just installed redhat 9, and check with tripwire, However, the following > report shows that there are a lot of folders or files not existing with no > integrity. Why? Please give me helping hand, thanks > > Regards, > Simon > > > /etc/cron.daily/tripwire-check: > > Parsing policy file: /etc/tripwire/tw.pol > *** Processing Unix File System *** > Performing integrity check... > ### Warning: File system error. > ### Filename: /proc/scsi > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/fsck.minix > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/mkfs.bfs > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/mkfs.minix > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/update > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/dhcpcd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/ipvsadm > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/ipvsadm-restore > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/ipvsadm-save > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /sbin/raidhotgenerateerror > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ipchains > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ipvsadm > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ypbind > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/amd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/arpwatch > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/autofs > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/bcm5820 > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/bgpd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/bootparamd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/cWnn > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/dhcpd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/firewall > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/freeWnn > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/gated > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/identd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/innd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/irda > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/iscsi > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/isdn > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/junkbuster > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/kadmin > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/kprop > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/krb524 > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/krb5kdc > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/kWnn > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ldap > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/linuxconf > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/lpd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/mars_nwe > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/mcserv > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/nfs > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/nscd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ospf6d > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ospfd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/pcmcia > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/postgresql > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/pxe > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/radvd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rarpd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/reconfig > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rhnsd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ripd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ripngd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/routed > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rstatd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rusersd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rwalld > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/rwhod > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/smb > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/snmpd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/squid > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/tux > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/tWnn > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ups > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/vncserver > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/wine > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/yppasswdd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ypserv > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/ypxfrd > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /var/lock/subsys/zebra > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /etc/tripwire/localhost-local.key > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /bin/gawk-3.1.0 > ### No such file or directory > ### Continuing... > ### Warning: File system error. > ### Filename: /bin/zsh-4.0.2 > ### No such file or directory > ### Continuing... > > first, you need to exclude /var/lock and /proc, cause these are changing periodically. /etc/tripwire/localhost-local.key, /bin/gawk-3.1.0 should actually not change. When did you have the initial tripwire scan? When did you have the second scan? Did you change anything between these times, such as upgrades? If in doubt, check the timestamps. Eric
|
 |
| Tags |
| check, tripwire |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
