r
r
Whe
selecti
gapassphrasekeepi
mi
dthatgoodpassphrasestypicallyr
haveuppera
dlowercaselettersdigitsa
dpu
ctuatio
marksa
darer
atleast8charactersi
le
gthr
r
E
terthelocalkeyfilepassphrase　←输入“localkeyfile”口令（输入后不会显示），并且记住这个口令r
Verifythelocalkeyfilepassphrase　←再次确认“localkeyfile”口令r
Ge
erati
gkeythismaytakeseveralmi
utesKeyge
eratio
completer
r
edwi
发表于20113311037r
Ge
erati
gTripwireco
figuratio
filer
r
r
Creati
gsig
edco
figuratio
filer
Pleasee
teryoursitepassphrase　←输入“sitekeyfile”口令（输入后不会显示）r
Wroteco
figuratio
fileetctripwiretwcfgr
r
Acleartextversio
oftheTripwireco
figuratio
filer
etctripwiretwcfgtxtr
hasbee
preservedforyouri
spectio
Itisrecomme
dedr
thatyoudeletethisfilema
uallyafteryouhaveexami
editr
r
r
Customizi
gdefaultpolicyfiler
r
r
Creati
gsig
edpolicyfiler
Pleasee
teryoursitepassphrase　←输入“sitekeyfile”口令（输入后不会显示）r
Wrotepolicyfileetctripwiretwpolr
r
Acleartextversio
oftheTripwirepolicyfiler
etctripwiretwpoltxtr
hasbee
preservedforyouri
spectio
Thisimpleme
tsr
ami
imalpolicyi
te
dedo
lytotestesse
tialr
Tripwirefu
ctio
alityYoushouldeditthepolicyfiler
todescribeyoursystema
dthe
usetwadmi
toge
erater
a
ewsig
edcopyoftheTripwirepolicyr
r
r
Thei
stallatio
succeededr
r
PleaserefertousrlocaldoctripwireRelease_Notesr
forreleasei
formatio
a
dtothepri
teduserdocume
tatio
r
forfurtheri
structio
so
usi
gTripwire23Ope
Sourcer
make3Leavi
gdirectoryroottripwire2312r
make2Leavi
gdirectoryroottripwire2312r
make1Leavi
gdirectoryroottripwire2312r
rootservervietctripwiretwcfgtxt　←修改文本格式的Tripwire配置文件r
r
LOOSEDIRECTORYCHECKINGfalse　←找到这一个行，将false的值变为true（不监测所属目录的数据完整性）r
　↓r
LOOSEDIRECTORYCHECKINGtrue　←变为此状态r
r
REPORTLEVEL3　←找到这一行，将3变为4（改变监测结果报告的等级）r
　↓r
REPORTLEVEL4　←变为此状态r
r
rootservertwadmi
createcfgfileSetctripwiresitekeyetctripwiretwcfgtxt　←从文本配置文件建立加密格式配置文件r
r
Pleasee
teryoursitepassphrase　←输入“sitekeyfile”口令（输入后不会显示）r
Wroteco
figuratio
fileetctripwiretwcfgr
r
rootserverrmfetctripwiretwcfgtxt　←为不留安全隐患，删除文本格式的配置文件r
r
注：恢复文本格式的Tripwire配置文件，可通过执行“twadmi
r