Date: Tue, 25 Jan 2000 10:58:39 -0600 From: Richard Martin <dmartin@origen.com> To: freebsd-security@freebsd.org Subject: Tripwire dates Message-ID: <388DD63F.A28F831F@origen.com>
next in thread | raw e-mail | index | archive | help
Anyone know if there is a flag that needs to be set to allow Tripwire to pass the file date information into its report? I have used both the ports version and compiled it myself from COAST, but daily reports from both versions show a "(null)" entry like changed: -rw-r--r-- root 1351 (null) /etc/rc.conf changed: -rw-r--r-- root 9 (null) /etc/ntp/drift where the date should be. TW running on other platforms prints in the file date like changed: -rw-r--r-- root 16384 Jan 13 18:14:05 2000 /etc/aliases.db changed: -rw-r--r-- root 9 Jan 25 02:02:36 2000 /etc/ntp/drift which is helpful in determining legal file modifications. -- Richard Martin dmartin@origen.com OriGen Biomedical Tel: +1 512 474 7278 2525 Hartford Rd. Fax: +1 512 708 8522 Austin, TX 78703 http://www.cardiacdocs.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?388DD63F.A28F831F>