Fixing tripwire

This commit is contained in:
Bob Mottram 2014-10-11 16:07:07 +01:00
parent e4e39e5517
commit 4f68eb83a2
1 changed files with 5 additions and 3 deletions

View File

@ -4550,15 +4550,17 @@ function intrusion_detection {
echo ''
echo ''
tripwire --init
sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
sed -i '/# These files change the behavior of the root account/,/}/ s/# *//' /etc/tripwire/twpol.txt
tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt
# make a script for easy resetting of the tripwire
echo '#!/bin/sh' > /usr/bin/reset-tripwire
echo 'tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt' >> /usr/bin/reset-tripwire
chmod +x /usr/bin/reset-tripwire
reset-tripwire
sed -i 's/SYSLOGREPORTING =true/#SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
sed -i '/# These files change the behavior of the root account/,/}/ s/# *//' /etc/tripwire/twpol.txt
reset-tripwire
echo 'intrusion_detection' >> $COMPLETION_FILE
}