About This GuideDocument ListConventionsSupportTripwire Professional ServicesTripwire Educational ServicesContentsIntroduction to Tripwire for ServersOverviewHow Tripwire for Servers WorksData and Network Integrity with Tripwire SoftwareSecuritySystem ManagementRisk ManagementUsing Tripwire SoftwareTripwire FilesKey Files and PassphrasesTripwire ManagerChanges for This VersionConfiguring Tripwire for ServersOverviewEditing the Configuration FileSetting Up E-mail ReportingSetting Up Log File ReportingSetting Up SNMP LoggingTesting E-mail ReportingCreating the Policy FileObtaining a Policy FileTripwire Policy Resource Center WebsiteTripwire for Servers CDEditing the Policy FileSigning and Installing the Policy FileInitializing the Database FileTuning the Policy FileUsing Tripwire for ServersOverviewChecking IntegrityE-mailing Integrity Check ReportsSelective Integrity ChecksScheduling Integrity ChecksViewing Report FilesUpdating the Database FileResolving Database Update ProblemsUpdating the Policy FileThe Policy Update ProcessResolving Policy Update ProblemsChanging PassphrasesTripwire AgentUsing Tripwire Agent on Windows SystemsUsing Tripwire Agent on UNIX SystemsCommand ReferenceIntroductionCommand ConventionsCommand-Line HelpWildcardstripwiretripwire Database Initialization Modetripwire Integrity Check Modetripwire Database Update Modetripwire Policy Update Modetripwire Test Modetwprinttwprint Print Report Modetwprint Print Database Modetwadmintwadmin Create Configuration File Modetwadmin Print Configuration File Modetwadmin Create Policy File Modetwadmin Print Policy File Modetwadmin Remove Encryption Modetwadmin Encrypt a File Modetwadmin Examine Encryption Modetwadmin Generate Keys Modesiggentwagenttwagent Create Agent Configuration File Modetwagent Print Agent Configuration File Modetwagent Start modetwagent Install Modetwagent Remove ModeGlossaryIndexTripwire for Servers2.4User Guide© 2001 Tripwire, Inc. Tripwire is a registered trademark of Tripwire, Inc.All rights reserved.Microsoft, Windows, Windows NT, and Windows 2000 are registeredtrademarks of Microsoft Corporation.UNIX is a registered trademark of the Open Group.Linux is a registered trademark of Linus Torvalds.Java and all Java-based marks are trademarks or registered trademarks ofSun Microsystems, Inc. in the U.S. and other countries.All other brand or product names may be trademarks or registeredtrademarks of their respective companies or organizations.This product includes software developed by the OpenSSL Project for usein the OpenSSL Toolkit (http://www.openssl.org).Tripwire, Inc.326 SW Broadway, 3rd FloorPortland, OR 97205tel: 1.877.TRIPWIREfax: 503.223.0182http://[email protected] This GuideAbout This GuideTripwire for Servers User Guide vDocument ListThe Tripwire Installation Guide describes installation procedures forTripwire Manager and Tripwire for Servers software.The Tripwire for Servers User Guide describes configuration andoperation of Tripwire for Servers software.The Tripwire Manager User Guide describes configuration andoperation of Tripwire Manager software, which is used to managemultiple installations of Tripwire for Servers software.The Tripwire Reference Guide contains detailed information about theTripwire configuration and policy files.The Quick Reference Cards summarize important functionality ofTripwire for Servers software.You can access PDF versions of the Guides from the docs directories onthe Tripwire Manager and Tripwire for Servers CDs.You can access online help from the Tripwire Manager interface.About This Guidevi Tripwire for Servers User GuideConventionsThis Guide uses the following typographic conventions.Bold in regular text indicates FTP and HTTP URLs, andemphasizes important issues.Italic indicates file and directory names.Constant in regular text shows commands and command-lineoptions, and policy file rule attributes, directives, andvariables.Sans Serifin examples shows actual user input on the command line.Sans Serif Italicin examples shows variables which should be replacedwith context-specific values.denotes sections of the text that apply only to Windowsinstallations of Tripwire software. Unless otherwisespecified, all references to Windows refer to bothWindows NT and Windows 2000.denotes sections of the text that apply only to UNIX orLinux installations of Tripwire software. Unlessotherwise specified, all references to UNIX also refer toLinux.[options] the command reference section shows optionalcommand-line arguments in brackets.{ 1 | 2 | 3 } the command reference section shows sets of possibleoptions in braces, separated by the | character. Chooseonly one of the options.Unless otherwise specified, command-line examples assume that theTripwire bin directory is the current working directory.WUAbout This GuideTripwire for Servers User Guide viiSupportFor the latest information and support for Tripwire products, visit theTripwire website or contact Tripwire Technical Support.Tripwire Support Website: http://www.tripwire.com/supportTripwire Technical Support:e-mail: [email protected]: 1.866.TWSUPPORT (6am-6pm Pacific)phone: 503.276.7663General information: [email protected] Professional ServicesTripwire Professional Services provides flexible service and support tomeet your specific technical and deployment needs. If you would likeTripwire software deployment and implementation assistance, oradditional training in using Tripwire software products, visithttp://www.tripwire.com or contact your Tripwire Sales Representative.Tripwire Educational ServicesObtain expert hands-on technical training and experience from a TripwireCertified Instructor. Courses are offered by Tripwire Authorized TrainingCenters, and prepare you to install, configure, and maintain Tripwiresoftware. Visit http://www.tripwire.com or contact your Tripwire SalesRepresentative for more information.Tripwire for Servers User Guide ixContentsAbout This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . iiiDocument List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vConventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viSupport. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .viiTripwire Professional Services . . . . . . . . . . . . . . . . . . . . . .viiTripwire Educational Services. . . . . . . . . . . . . . . . . . . . . . .viiIntroduction to