Quellcode durchsuchen

tripwire exclusions to avoid triggering on routine updates

Bob Mottram vor 7 Jahren
Ursprung
Commit
8f1df8243d
1 geänderte Dateien mit 43 neuen und 0 gelöschten Zeilen
  1. 43
    0
      src/freedombone-base-tripwire

+ 43
- 0
src/freedombone-base-tripwire Datei anzeigen

@@ -105,6 +105,11 @@ function install_tripwire {
105 105
     if ! grep -q '!/etc/tripwire' /etc/tripwire/twpol.txt; then
106 106
         sed -i '\|/etc\t\t->.*|a\    !/etc/tripwire ;' /etc/tripwire/twpol.txt
107 107
     fi
108
+    # Ignore /etc/freedombone
109
+    if ! grep -q '!/etc/tripwire' /etc/tripwire/twpol.txt; then
110
+        sed -i '\|/etc\t\t->.*|a\    !/etc/freedombone ;' /etc/tripwire/twpol.txt
111
+    fi
112
+    # Ignore /etc/pihole
108 113
     if ! grep -q '!/etc/pihole' /etc/tripwire/twpol.txt; then
109 114
         sed -i '\|/etc\t\t->.*|a\    !/etc/pihole ;' /etc/tripwire/twpol.txt
110 115
     fi
@@ -115,6 +120,44 @@ function install_tripwire {
115 120
     if ! grep -q '!/etc/share/tt-rss/lock' /etc/tripwire/twpol.txt; then
116 121
         sed -i '\|/etc\t\t->.*|a\    !/etc/share/tt-rss/lock ;' /etc/tripwire/twpol.txt
117 122
     fi
123
+    # Ignore additional install files
124
+    if ! grep -q '!/usr/local/bin/freedombone' /etc/tripwire/twpol.txt; then
125
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/freedombone*    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
126
+    fi
127
+    if ! grep -q '!=/usr/local/bin' /etc/tripwire/twpol.txt; then
128
+        sed -i '\|/usr/local/sbin.*|a\    !=/usr/local/bin    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
129
+    fi
130
+    if ! grep -q '!/usr/local/bin/addremove' /etc/tripwire/twpol.txt; then
131
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/addremove    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
132
+    fi
133
+    if ! grep -q '!/usr/local/bin/backup' /etc/tripwire/twpol.txt; then
134
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/backup    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
135
+    fi
136
+    if ! grep -q '!/usr/local/bin/backup2friends' /etc/tripwire/twpol.txt; then
137
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/backup2friends    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
138
+    fi
139
+    if ! grep -q '!/usr/local/bin/batman' /etc/tripwire/twpol.txt; then
140
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/batman    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
141
+    fi
142
+    if ! grep -q '!/usr/local/bin/control' /etc/tripwire/twpol.txt; then
143
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/control    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
144
+    fi
145
+    if ! grep -q '!/usr/local/bin/controluser' /etc/tripwire/twpol.txt; then
146
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/controluser    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
147
+    fi
148
+    if ! grep -q '!/usr/local/bin/cronic' /etc/tripwire/twpol.txt; then
149
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/cronic    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
150
+    fi
151
+    if ! grep -q '!/usr/local/bin/meshavahi' /etc/tripwire/twpol.txt; then
152
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/meshavahi    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
153
+    fi
154
+    if ! grep -q '!/usr/local/bin/restore' /etc/tripwire/twpol.txt; then
155
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/restore    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
156
+    fi
157
+    if ! grep -q '!/usr/local/bin/restorefromfriend' /etc/tripwire/twpol.txt; then
158
+        sed -i '\|/usr/local/sbin.*|a\    !/usr/local/bin/restorefromfriend    -> $(SEC_BIN) ;' /etc/tripwire/twpol.txt
159
+    fi
160
+
118 161
     # Avoid logging the changed database
119 162
     sed -i 's|$(TWETC)/tw.pol.*||g' /etc/tripwire/twpol.txt
120 163
     # site key name