Tripwire installation

This commit is contained in:
Bob Mottram 2014-10-11 15:50:42 +01:00
parent e9ed8751fc
commit 231a56803e
1 changed files with 13 additions and 6 deletions

View File

@ -2814,6 +2814,7 @@ function import_email {
create_backup_script create_backup_script
create_restore_script create_restore_script
backup_to_friends_servers backup_to_friends_servers
intrusion_detection
echo '' echo ''
echo "$EMAIL_COMPLETE_MSG" echo "$EMAIL_COMPLETE_MSG"
if [ -d $USB_MOUNT ]; then if [ -d $USB_MOUNT ]; then
@ -2840,7 +2841,7 @@ function import_email {
create_backup_script create_backup_script
create_restore_script create_restore_script
backup_to_friends_servers backup_to_friends_servers
apt-get -y --force-yes autoremove intrusion_detection
# unmount any attached usb drive # unmount any attached usb drive
echo '' echo ''
echo "$EMAIL_COMPLETE_MSG" echo "$EMAIL_COMPLETE_MSG"
@ -2905,7 +2906,7 @@ function install_owncloud {
create_backup_script create_backup_script
create_restore_script create_restore_script
backup_to_friends_servers backup_to_friends_servers
apt-get -y --force-yes autoremove intrusion_detection
# unmount any attached usb drive # unmount any attached usb drive
if [ -d $USB_MOUNT ]; then if [ -d $USB_MOUNT ]; then
umount $USB_MOUNT umount $USB_MOUNT
@ -3067,7 +3068,7 @@ function install_owncloud {
create_backup_script create_backup_script
create_restore_script create_restore_script
backup_to_friends_servers backup_to_friends_servers
apt-get -y --force-yes autoremove intrusion_detection
# unmount any attached usb drive # unmount any attached usb drive
if [ -d $USB_MOUNT ]; then if [ -d $USB_MOUNT ]; then
umount $USB_MOUNT umount $USB_MOUNT
@ -4549,8 +4550,14 @@ function intrusion_detection {
echo '' echo ''
echo '' echo ''
tripwire --init tripwire --init
sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
sed -i '/# These files change the behavior of the root account/,/}/ s/# *//' /etc/tripwire/twpol.txt
tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt
tripwire --check
# make a script for easy resetting of the tripwire
echo '#!/bin/sh' > /usr/bin/reset-tripwire
echo 'tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt' >> /usr/bin/reset-tripwire
chmod +x /usr/bin/reset-tripwire
echo 'intrusion_detection' >> $COMPLETION_FILE echo 'intrusion_detection' >> $COMPLETION_FILE
} }