WoNoBloG: The infosec review of Tripwire by The Herbaliser

maandag 5 maart 2018

The infosec review of tripwire.

Believe me, it is funky.

===============================================================================

Report Summary:

===============================================================================

Host name: prod-db-srv

Host IP address: 192.168.1.10

Host ID: None

Policy file used: /opt/tripwire/etc/tw.pol

Configuration file used: /opt/tripwire/etc/tw.cfg

Database file used: /opt/tripwire/lib/tripwire/prod-db-srv.twd

Command line used: ./tripwire --check --interactive

Remove the "x" from the adjacent box to prevent updating the database

with the new values for this object.

Added:

[x] "/usr/home/olaf/Music/BOS/The Herbaliser - Bring Out The Sound - 09 Tripwire.mp3"

Added object name:
/usr/home/olaf/Music/BOS/The Herbaliser - Bring Out The Sound - 09 Tripwire.mp3

Property: Expected Observed

------------- ----------- -----------

* Object Type --- Regular File

* Device Number --- 2049

* Inode Number --- 8606391042

* Mode --- -rw-r-----

* Num Links --- 1

* UID --- olaf (501)

* GID --- staff (20)

* Size --- 7385430

* Modify Time --- Tue 22 Feb 2018 10:01:51 AM PST

* Blocks --- 14432

* CRC32 --- f84880a3

* MD5 --- 5c4206b8095aeac

Please enter your local passphrase:

Incorrect local passphrase.

Please enter your local passphrase:

Wrote database file: /opt/tripwire/lib/tripwire/prod-db-srv.twd

maandag 5 maart 2018