RE: Tripwire Policy Settings

From: Sean@boran.com
Date: 11/25/01


From: <Sean@boran.com>
To: "'Ng Su-Hwei Nat'" <NgSHNat@ocbc.com.sg>, <focus-sun@securityfocus.com>
Subject: RE: Tripwire Policy Settings
Date: Sun, 25 Nov 2001 21:19:01 +0100
Message-ID: <000101c175ee$6baed250$0b1111b0@swissptt.ch>



> Anyone used Tripwire befoe and can anyone recommend how one
> should configure
> the policy for UNIX servers ?
> And how do I prevent false alarms ?
>
> Let me konw if you have tried tripwire and good recommendations on the
> policy settings for Tripwire on UNIX servers.

An example policy file for solaris is attached.
I've added comments and examples from live systems..

Sean Boran