|
@@ -6560,12 +6560,29 @@ Comment out the line:
|
6560
|
6560
|
|
6561
|
6561
|
Then save and exit.
|
6562
|
6562
|
|
6563
|
|
-If you subsequently install any more packages or make configuration changes then update the policy again with:
|
|
6563
|
+#+BEGIN_SRC: bash
|
|
6564
|
+editor /usr/bin/reset-tripwire
|
|
6565
|
+#+END_SRC
|
|
6566
|
+
|
|
6567
|
+Add the following:
|
6564
|
6568
|
|
6565
|
6569
|
#+BEGIN_SRC: bash
|
|
6570
|
+#!/bin/sh
|
6566
|
6571
|
tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt
|
6567
|
6572
|
#+END_SRC
|
6568
|
6573
|
|
|
6574
|
+Save and exit.
|
|
6575
|
+
|
|
6576
|
+#+BEGIN_SRC: bash
|
|
6577
|
+chmod +x /usr/bin/reset-tripwire
|
|
6578
|
+#+END_SRC
|
|
6579
|
+
|
|
6580
|
+If you subsequently install any more packages or make configuration changes then update the policy again with:
|
|
6581
|
+
|
|
6582
|
+#+BEGIN_SRC: bash
|
|
6583
|
+reset-tripwire
|
|
6584
|
+#+END_SRC
|
|
6585
|
+
|
6569
|
6586
|
Also, to look for any rootkits.
|
6570
|
6587
|
|
6571
|
6588
|
#+BEGIN_SRC: bash
|