浏览代码

Improve the tripwire policy

Bob Mottram 10 年前
父节点
当前提交
7979839cc3
共有 1 个文件被更改,包括 5 次插入1 次删除
  1. 5
    1
      src/freedombone

+ 5
- 1
src/freedombone 查看文件

8038
   chmod +x /usr/bin/reset-tripwire
8038
   chmod +x /usr/bin/reset-tripwire
8039
 
8039
 
8040
   reset-tripwire
8040
   reset-tripwire
8041
-  sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
8041
+  sed -i 's/SYSLOGREPORTING.*/SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
8042
   sed -i '/# These files change the behavior of the root account/,/}/ s/.*//g' /etc/tripwire/twpol.txt
8042
   sed -i '/# These files change the behavior of the root account/,/}/ s/.*//g' /etc/tripwire/twpol.txt
8043
+  # Don't show any changes to /proc
8044
+  sed -i 's|/proc.*||g' /etc/tripwire/twpol.txt
8045
+  # Don't report log changes
8046
+  sed -i 's|/var/log.*||g' /etc/tripwire/twpol.txt
8043
   reset-tripwire
8047
   reset-tripwire
8044
 
8048
 
8045
   echo 'intrusion_detection' >> $COMPLETION_FILE
8049
   echo 'intrusion_detection' >> $COMPLETION_FILE