Hello Folks,
i just installed tripwire and everythings seems to be fine. The only thing i am worrying about are fake Reports send to me. If the System is hacked and compromised between two Tripwire runs, could't the hacker stop the Cronjob and starts sending me a fake-report telling everythings fine ? I could put the /etc/crontab on a read-only media, but what would that help ? Any Hints welcome, Regards, Philipp Steinkrüger
