
148 Chapter 12. Installing and Configuring Tripwire
Figure 12-1. How to Use Tripwire
The following steps should be taken to properly install, use and maintain Tripwire:
1. Install Tripwire and customize the policy file — If not already done, install the
tripwire RPM (see Section 12.2.1). Then, customize the sample configuration
(/etc/tripwire/twcfg.txt) and policy (/etc/tripwire/twpol.txt) files and run the
configuration script (/etc/tripwire/twinstall.sh). For more information, see Section
12.2.2.
2. Initialize the Tripwire database — Build a database of critical system files to monitor based
on the contents of the new, signed Tripwire policy file (/etc/tripwire/tw.pol). For more
Commenti su questo manuale