Home > Help Files > Security > Redhat Linux-specific Tripwire

Tripwire


Tripwire is a file system integrity-checking program for UNIX operating systems. To use it, you first must build a configuration file that designates the directories and files that you want to verify and the attributes you want to have verified for each. You then run Tripwire (with the initialize option) to create a database of cryptographic checksums that correspond to the files and directories specified in the configuration file. -- [From CERT]

Setting up Tripwire
Current free version of Tripwire is 1.3.x. However, tripwire 2.x is free on Linux and comes pre-installed on Redhat Linux 7. To start running triwire:

1.  $> su 
2.  $> cd /etc/tripwire
3.  $> ./twinstall.sh
    You'll be prompted for a local & system specific password.  
Updating Tripwire
To update tripwire run:
    $> su
    $> tripwire --update

 


Comments to consult@newton.berkeley.edu
© 1998-2009 UC Regents