[CentOS] Tripwire Question
Al Sparks
data345 at yahoo.com
Wed Nov 4 22:25:11 UTC 2009
Here's partial output. The command I ran with strace was:
strace /usr/loca/bin/tripwire -m i
This initializes the tripwire database. I include what I think is the
relevant output here:
lstat("/ora", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
write(1, "The object: \"/ora\" is on a diffe"..., 61) = 61
lstat("/selinux", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
open("/selinux", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4
fcntl(4, F_SETFD, FD_CLOEXEC) = 0
getdents(4, /* 2 entries */, 32768) = 48
getdents(4, /* 0 entries */, 32768) = 0
close(4) = 0
lstat("/srv", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
open("/srv", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = 4
fcntl(4, F_SETFD, FD_CLOEXEC) = 0
getdents(4, /* 2 entries */, 32768) = 48
getdents(4, /* 0 entries */, 32768) = 0
close(4) = 0
I looked at the lstat man page, and there is a blurb on how it treats
symbolic links as individual files. But /ora isn't a symbolic link.
=== Al
----- Original Message ----
From: Corey Chandler <lists at sequestered.net>
To: CentOS mailing list <centos at centos.org>
Sent: Wed, November 4, 2009 10:06:58 AM
Subject: Re: [CentOS] Tripwire Question
Al Sparks wrote:
> I'm trying to run tripwire on a RHEL 5.4 box. I'm new to it.
>
>
RHEL != CentOS.
That said, what happens when you strace tripwire?
-- Corey / KB1JWQ
_______________________________________________
CentOS mailing list
CentOS at centos.org
http://lists.centos.org/mailman/listinfo/centos
More information about the CentOS
mailing list