How to ensure Tripwire is doing its job ?

From: Caldera OpenLinux Benutzer (steinkrueger@oberberg.net)
Date: 01/02/02 

From: Caldera OpenLinux Benutzer <steinkrueger@oberberg.net>
To: security-basics@securityfocus.com
Date: Wed, 2 Jan 2002 17:16:41 +0100

Hello Folks,

i just installed tripwire and everythings seems to be fine.
The only thing i am worrying about are fake Reports send to
me. If the System is hacked and compromised between two
Tripwire runs, could't the hacker stop the Cronjob and starts
sending me a fake-report telling everythings fine ?

I could put the /etc/crontab on a read-only media, but what would
that help ?

Any Hints welcome,

Regards,
Philipp Steinkrüger