|
@@ -4550,15 +4550,17 @@ function intrusion_detection {
|
4550
|
4550
|
echo ''
|
4551
|
4551
|
echo ''
|
4552
|
4552
|
tripwire --init
|
4553
|
|
- sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
|
4554
|
|
- sed -i '/# These files change the behavior of the root account/,/}/ s/# *//' /etc/tripwire/twpol.txt
|
4555
|
|
- tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt
|
4556
|
4553
|
|
4557
|
4554
|
# make a script for easy resetting of the tripwire
|
4558
|
4555
|
echo '#!/bin/sh' > /usr/bin/reset-tripwire
|
4559
|
4556
|
echo 'tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt' >> /usr/bin/reset-tripwire
|
4560
|
4557
|
chmod +x /usr/bin/reset-tripwire
|
4561
|
4558
|
|
|
4559
|
+ reset-tripwire
|
|
4560
|
+ sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
|
|
4561
|
+ sed -i '/# These files change the behavior of the root account/,/}/ s/# *//' /etc/tripwire/twpol.txt
|
|
4562
|
+ reset-tripwire
|
|
4563
|
+
|
4562
|
4564
|
echo 'intrusion_detection' >> $COMPLETION_FILE
|
4563
|
4565
|
}
|
4564
|
4566
|
|