User's Manual

Solaris 9 Security CX-310-301 43
The following output shows the result of a Tripwire report after running a check on the fingerprint
database. Before running the check, the following commands were run to force two changes:
¾ touch /etc/passwd – to update the access time on the password file
¾ cp /etc/inet/hosts /etc/inet/hosts.JP – to make a copy of the hosts file
# bin/twprint --print-report --report-file ultra-20040413-165329.twr
Note: Report is not encrypted.
Tripwire Integrity Check Report version 4.0.0
Tripwire(R) for Servers version 4.1.0.210
Report generated by: root
Report created on: Tue, 13 Apr 2004 16:53:29 +0100
Database last updated on: Tue, 13 Apr 2004 16:46:10 +0100
====================================================
Report Summary:
====================================================
Host name: ultra
Host IP address: 192.168.1.2
Host ID: 0x80888ae4
Policy file used: /usr/local/tripwire/tfs/policy/tw.pol
Configuration file used: /usr/local/tripwire/tfs/bin/tw.cfg
Database file used: /usr/local/tripwire/tfs/db/database.twd
Command line used: ./tripwire --check
====================================================
Rule Summary:
====================================================
-----------------------------------------------------------------------
Section: Unix File System
-----------------------------------------------------------------------
Rule Name Severity Level Added Removed Modified
--------- -------------- ----- ------- --------
Tripwire Data Files 100 0 0 0
Other Filesystems 100 0 0 0
System Devices 100 0 0 0
User Home Directories 35 0 0 0
Mounted Filesystems 100 0 0 0
(/mnt)
System Processes 100 0 0 0
(/proc)
Temporary directory 35 0 0 0
(/tmp)
Variable System Files 35 0 0 0
Tripwire Binaries 100 0 0 0
System Binaries 100 0 0 0
Library Files 35 0 0 0