From owner-freebsd-questions@FreeBSD.ORG Mon Aug 29 17:16:38 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D06F616A41F for ; Mon, 29 Aug 2005 17:16:38 +0000 (GMT) (envelope-from james@idea-anvil.net) Received: from www.idea-anvil.net (idea-anvil.net [63.226.12.96]) by mx1.FreeBSD.org (Postfix) with ESMTP id 75F4543D48 for ; Mon, 29 Aug 2005 17:16:38 +0000 (GMT) (envelope-from james@idea-anvil.net) Received: from mail.idea-anvil.net (vaio.idea-anvil.net [10.0.0.99]) by www.idea-anvil.net (8.13.3/8.13.3) with ESMTP id j7THGb0v072723 for ; Mon, 29 Aug 2005 10:16:37 -0700 (MST) (envelope-from james@idea-anvil.net) From: James To: freebsd-questions@freebsd.org Date: Mon, 29 Aug 2005 10:16:32 -0700 User-Agent: KMail/1.8 References: <20050617073911.78ed92cc.clists@gotbrains.org> In-Reply-To: <20050617073911.78ed92cc.clists@gotbrains.org> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200508291016.33408.james@idea-anvil.net> Subject: Re: tripwire X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Aug 2005 17:16:39 -0000 On Friday 17 June 2005 05:39 am, Stephen P. Cravey wrote: > I'm having trouble gettign tripwire to update the database. When I run: > tripwire --update -v > I get the following: > > Tripwire(R) 2.3.1.2 for BSD > > Tripwire 2.3 Portions copyright 2000 Tripwire, Inc. Tripwire is a > registered trademark of Tripwire, Inc. This software comes with > ABSOLUTELY NO WARRANTY; for details use --version. This is free software > which may be redistributed or modified only under certain conditions; > see COPYING for details. All rights reserved. > Opening configuration file: /usr/local/etc/tripwire/tw.cfg > This file is encrypted. > > Opening key file: /usr/local/etc/tripwire/site.key > Opening key file: /usr/local/etc/tripwire/foo.bar.org-local.key > Opening database file: /var/db/tripwire/foo.bar.org.twd > This file is encrypted. > Opening report file: > /var/db/tripwire/report/foo.bar.org-20050617-073542.twr > ### Error: File could not be opened. > ### Filename: > #/var/db/tripwire/report/foo.bar.org-20050617-073542.twr ## No such > #file or directory ## Exiting... > > > > I have verified that the file: > /var/db/tripwire/report/foo.bar.org-20050617-073542.twr > can be written by root (duh), but i cannot figure out why I'm getting > the error. Ideas? > > -Stephen Hi, I remeber getting such an error and it having to do with the date of creation in the file name. The day the database report was created and the day the update is run are different and the update is trying to find a report with the current date and not the date of creation. You will find that using "tripwire -m c -I" will: 1) check the database 2) create the report for the current day 3) open the report in the editor specified in tw.cfg (default is vi) 4) allow you to adjust what you want updated in the database 5) update the database after you exit vi. Upon exit you will be prompted for your local passphrase and then the updated database will be writen. -james