首页 > > 操作系统 > FreeBSD >

freebsd下tripwire的安装与配置

2009-05-13 11:20:59来源：未知阅读 ()

一,安装
  cd /usr/ports/security/tripwire
  make install clean

二.配置
  1./usr/local/etc/tripwire

  twcfg.txt       ---------Tripwire配置文件
  twpol.txt       ---------Policy文件的配置

2. vi twcfg.txt　                      ← 修改文本格式的Tripwire配置文件
...................

3.twadmin --create-cfgfile -S /etc/tripwire/site.key /etc/tripwire/twcfg.txt　
                                    ← 从文本配置文件建立加密格式配置文件
  Please enter your site passphrase: 　 ← 输入“site keyfile”口令（输入后不会显示）
  Wrote configuration file: /etc/tripwire/tw.cfg
4.rm -f /etc/tripwire/twcfg.txt    　← 为不留安全隐患，删除文本格式的配置文件

5.恢复:
twadmin --print-cfgfile > /etc/tripwire/twcfg.txt
twadmin --print-polfile > /etc/tripwire/twpol.txt

6.Policy文件的配置
Tripwire的数据库是基于Policy文件建立的。但默认的Policy文件并没有有效的依照我们的需要建立数据完整性监测规则，所以这里通过一段Perl脚本来让数据监测实际满足于我们的需要。
vi /etc/tripwire/twpolmake.pl　 ← 建立用于建立Policy文件的Perl脚本
#!/usr/bin/perl
# Tripwire Policy File customize tool
# ----------------------------------------------------------------
# Copyright (C) 2003 Hiroaki Izumi
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有