Tu as bien raison didierg la page du lien est trop ancienne, 10 ans, et il n'y a plus la commande du fichier twinstall.sh aujourd'hui, bref il y a quoi ce casser les dents. Ce n'est pas grave Edouard_le_homard. J'ai abandonné, méthode infaisable en 2016.
En revanche je viens de trouver sur un autre site, et il faut crée en premier les clés avec la commande suivante:
# tripwire-setup-keyfiles
le s
----------------------------------------------
The Tripwire site and local passphrases are used to sign a variety of
files, such as the configuration, policy, and database files.
Passphrases should be at least 8 characters in length and contain both
letters and numbers.
See the Tripwire manual for more information.
----------------------------------------------
Creating key files...
(When selecting a passphrase, keep in mind that good passphrases typically
have upper and lower case letters, digits and punctuation marks, and are
at least 8 characters in length.)
Enter the site keyfile passphrase:
Verify the site keyfile passphrase:
Generating key (this may take several minutes)...Key generation complete.
(When selecting a passphrase, keep in mind that good passphrases typically
have upper and lower case letters, digits and punctuation marks, and are
at least 8 characters in length.)
Enter the local keyfile passphrase:
Verify the local keyfile passphrase:
Generating key (this may take several minutes)...Key generation complete.
----------------------------------------------
Signing configuration file...
Please enter your site passphrase:
Wrote configuration file: /etc/tripwire/tw.cfg
A clear-text version of the Tripwire configuration file:
/etc/tripwire/twcfg.txt
has been preserved for your inspection. It is recommended that you
move this file to a secure location and/or encrypt it in place (using a
tool such as GPG, for example) after you have examined it.
----------------------------------------------
Signing policy file...
Please enter your site passphrase:
Wrote policy file: /etc/tripwire/tw.pol
A clear-text version of the Tripwire policy file:
/etc/tripwire/twpol.txt
has been preserved for your inspection. This implements a minimal
policy, intended only to test essential Tripwire functionality. You
should edit the policy file to describe your system, and then use
twadmin to generate a new signed copy of the Tripwire policy.
Once you have a satisfactory Tripwire policy file, you should move the
clear-text version to a secure location and/or encrypt it in place
(using a tool such as GPG, for example).
Now run "tripwire --init" to enter Database Initialization Mode. This
reads the policy file, generates a database based on its contents, and
then cryptographically signs the resulting database. Options can be
entered on the command line to specify which policy, configuration, and
key files are used to create the database. The filename for the
database can be specified as well. If no options are specified, the
default values from the current configuration file are used.
j'ai crée la clé du site comme demander et la clé locale, puis j'ai essayé l'initialisation, cela donne ceci avec des erreurs :
# tripwire --init
Please enter your local passphrase:
Parsing policy file: /etc/tripwire/tw.pol
Generating the database...
*** Processing Unix File System ***
### Warning: File system error.
### Filename: /usr/sbin/fixrmtab
### Aucun fichier ou dossier de ce type
### Continuing...
### Warning: File system error.
### Filename: /usr/bin/vimtutor
### Aucun fichier ou dossier de ce type
### Continuing...
### Warning: File system error.
### Filename: /usr/share/grub/i386-redhat/e2fs_stage1_5
### Aucun fichier ou dossier de ce type
### Continuing...
.....
etc ...etc ... etc ...
...
### Warning: File system error.
### Filename: /proc/pci
### Aucun fichier ou dossier de ce type
### Continuing...
Wrote database file: /var/lib/tripwire/localhost.local.twd
The database was successfully generated.
J'ai essayé aussi la commande suivante ( mais je m'en douter des erreurs du moment que j'en est avec l'initialisation ).
# tripwire --check
Parsing policy file: /etc/tripwire/tw.pol
*** Processing Unix File System ***
Performing integrity check...
### Warning: File system error.
### Filename: /usr/sbin/fixrmtab
### Aucun fichier ou dossier de ce type
### Continuing...
Commentaire : après réflexion je m'aperçois qu'on voit sur la ligne ### Filename: /usr/share/grub/i386-redhat/e2fs_stage1_5, alors que je suis en 64 bits sous Fedora, et je constate que j'ai fais fausse route avec les clés !!!
http://ithelpblog.com/os/linux/redhat/centos-redhat/install-tripwire-centos-redhat-rhel/
Mais en fait, c'est normal si on regarde le site j'ai les mêmes erreurs au niveau de step 4: Initializing Tripwire.
Je n'est pas fait l'étape 5.
Cela devient compliquer, je sais pas si je vais passer par la méthode du Tar :-o
