By default, the Tripwire RPM adds a shell script called tripwire-check to the /etc/cron.daily/ directory. This script automatically runs an integrity check once per day.
You can, however, run a Tripwire integrity check at any time by typing the following command:
/usr/sbin/tripwire --check |
the report is created in /var/lib/tripwire/report/. You can view the report using the twprint command as outlined in Section 19.6.1 Viewing Tripwire Reports.
Section 19.8.1 Tripwire and Email for instructions on how to set up and test this feature.
| Главная |