|  | @@ -6560,12 +6560,29 @@ Comment out the line:
 | 
	
		
			
			| 6560 | 6560 |  
 | 
	
		
			
			| 6561 | 6561 |  Then save and exit.
 | 
	
		
			
			| 6562 | 6562 |  
 | 
	
		
			
			| 6563 |  | -If you subsequently install any more packages or make configuration changes then update the policy again with:
 | 
	
		
			
			|  | 6563 | +#+BEGIN_SRC: bash
 | 
	
		
			
			|  | 6564 | +editor /usr/bin/reset-tripwire
 | 
	
		
			
			|  | 6565 | +#+END_SRC
 | 
	
		
			
			|  | 6566 | +
 | 
	
		
			
			|  | 6567 | +Add the following:
 | 
	
		
			
			| 6564 | 6568 |  
 | 
	
		
			
			| 6565 | 6569 |  #+BEGIN_SRC: bash
 | 
	
		
			
			|  | 6570 | +#!/bin/sh
 | 
	
		
			
			| 6566 | 6571 |  tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt
 | 
	
		
			
			| 6567 | 6572 |  #+END_SRC
 | 
	
		
			
			| 6568 | 6573 |  
 | 
	
		
			
			|  | 6574 | +Save and exit.
 | 
	
		
			
			|  | 6575 | +
 | 
	
		
			
			|  | 6576 | +#+BEGIN_SRC: bash
 | 
	
		
			
			|  | 6577 | +chmod +x /usr/bin/reset-tripwire
 | 
	
		
			
			|  | 6578 | +#+END_SRC
 | 
	
		
			
			|  | 6579 | +
 | 
	
		
			
			|  | 6580 | +If you subsequently install any more packages or make configuration changes then update the policy again with:
 | 
	
		
			
			|  | 6581 | +
 | 
	
		
			
			|  | 6582 | +#+BEGIN_SRC: bash
 | 
	
		
			
			|  | 6583 | +reset-tripwire
 | 
	
		
			
			|  | 6584 | +#+END_SRC
 | 
	
		
			
			|  | 6585 | +
 | 
	
		
			
			| 6569 | 6586 |  Also, to look for any rootkits.
 | 
	
		
			
			| 6570 | 6587 |  
 | 
	
		
			
			| 6571 | 6588 |  #+BEGIN_SRC: bash
 |