On Fri, 2003-08-15 at 17:06, Michael Schwendt wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 15 Aug 2003 16:44:41 -0400, Edward Croft wrote: > > > > > I have tripwire installed on all my servers, yet it is useless because I > > > > backup the servers and that changes the timestamps so that tripwire > > > > reports the files. > > > > > > I don't understand this. Which timestamps? Last accessed or modified > > > or changed? Backing up files should only update "last accessed" > > > which in turn should not trigger Tripwire. > > > > > Well, it is triggering tripwire. I know I have not been compromised. I > > have checked everything thoroughly. > > So, did you check the property masks? Tripwire can check the "last > accessed" timestamp, provided that you change the default policy > file and insert the 'a' flag. That would be a very paranoid setting > and only appropriate for special files which should not be accessed > by anyone. Let me recheck the settings. Maybe my predecessor did just that.
-- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED] https://www.redhat.com/mailman/listinfo/redhat-list
