Only send tripwire emails if something has changed

This commit is contained in:
Bob Mottram 2015-08-15 17:55:49 +01:00
parent 4c4d36a4d6
commit cd830fd845
1 changed files with 2 additions and 0 deletions

View File

@ -9869,6 +9869,8 @@ function intrusion_detection {
chmod +x /usr/bin/reset-tripwire
sed -i 's/SYSLOGREPORTING.*/SYSLOGREPORTING =false/g' /etc/tripwire/twcfg.txt
# only send emails if something has changed
sed -i 's|MAILNOVIOLATIONS.*|MAILNOVIOLATIONS = false|g' /etc/tripwire/twcfg.txt
sed -i '/# These files change the behavior of the root account/,/}/ s/.*//g' /etc/tripwire/twpol.txt
sed -i 's|/etc/rc.boot.*||g' /etc/tripwire/twpol.txt
# Don't show any changes to /proc