Here's partial output. The command I ran with strace was: strace /usr/loca/bin/tripwire -m i
This initializes the tripwire database. I include what I think is the relevant output here:
lstat("/ora", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 write(1, "The object: "/ora" is on a diffe"..., 61) = 61 lstat("/selinux", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/selinux", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 getdents(4, /* 2 entries */, 32768) = 48 getdents(4, /* 0 entries */, 32768) = 0 close(4) = 0 lstat("/srv", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/srv", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4 fcntl(4, F_SETFD, FD_CLOEXEC) = 0 getdents(4, /* 2 entries */, 32768) = 48 getdents(4, /* 0 entries */, 32768) = 0 close(4) = 0
I looked at the lstat man page, and there is a blurb on how it treats symbolic links as individual files. But /ora isn't a symbolic link.
=== Al
----- Original Message ---- From: Corey Chandler lists@sequestered.net To: CentOS mailing list centos@centos.org Sent: Wed, November 4, 2009 10:06:58 AM Subject: Re: [CentOS] Tripwire Question
Al Sparks wrote:
I'm trying to run tripwire on a RHEL 5.4 box. I'm new to it.
RHEL != CentOS.
That said, what happens when you strace tripwire?
-- Corey / KB1JWQ _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos