tripwire

[James]

On Friday 17 June 2005 05:39 am, Stephen P. Cravey wrote:
> I'm having trouble gettign tripwire to update the database. When I run:
> tripwire --update -v
> I get the following:
>
> Tripwire(R) 2.3.1.2 for BSD
>
> Tripwire 2.3 Portions copyright 2000 Tripwire, Inc. Tripwire is a
> registered trademark of Tripwire, Inc. This software comes with
> ABSOLUTELY NO WARRANTY; for details use --version. This is free software
> which may be redistributed or modified only under certain conditions;
> see COPYING for details. All rights reserved.
> Opening configuration file: /usr/local/etc/tripwire/tw.cfg
> This file is encrypted.
>
> Opening key file: /usr/local/etc/tripwire/site.key
> Opening key file: /usr/local/etc/tripwire/foo.bar.org-local.key
> Opening database file: /var/db/tripwire/foo.bar.org.twd
> This file is encrypted.
> Opening report file:
> /var/db/tripwire/report/foo.bar.org-20050617-073542.twr
> ### Error: File could not be opened.
> ### Filename:
> #/var/db/tripwire/report/foo.bar.org-20050617-073542.twr ## No such
> #file or directory ## Exiting...
>
>
>
> I have verified that the file:
> /var/db/tripwire/report/foo.bar.org-20050617-073542.twr
> can be written by root (duh), but i cannot figure out why I'm getting
> the error. Ideas?
>
> -Stephen

Hi,

I remeber getting such an error and it having to do with the date of creation 
in the file name. The day the database report was created and the day the 
update is run are different and the update is trying to find a report with 
the current date and not the date of creation.

You will find that using "tripwire -m c -I" will:

1) check the database
2) create the report for the current day
3) open the report in the editor specified in tw.cfg (default is vi)
4) allow you to adjust what you want updated in the database
5) update the database after you exit vi.

Upon exit you will be prompted for your local passphrase and then the updated 
database will be writen.

-james