Linux 安全和优化：RedHat 版本 - 实战指南
上一页第 17 章 软件 - 安全性/系统完整性下一页

17.2. 配置/var/tmp/install.cfg文件

回想一下 Tripwire 版本2.2.1不是开源的，因此您无法像其他归档源文件那样编译和安装它，而是必须修改install.cfg文件，该文件将在您指定系统安装路径时自动安装 Tripwire 软件。我们必须修改此文件以符合 Red Hat 文件系统结构，并将 Tripwire 二进制文件安装在我们的PATH环境变量下。

  1. 编辑install.cfg文件，viinstall.cfg并将此文件更改为如下所示
               #
           # install.cfg
           #
           # default install.cfg for:
           # Tripwire(R) 2.2.1 for Unix
           #
           # NOTE:  This is a Bourne shell script that stores installation
           #        parameters for your installation.  The installer will
           #        execute this file to generate your config file and also to
           #        locate any special configuration needs for your install.
           #        Protect this file, because it is possible for
           #        malicious code to be inserted here
           #
           # To set your Root directory for install, set TWROOT= to something
           # other than /usr/TSS as necessary.
           #
           #=======================================================

           # If CLOBBER is true, then existing files are overwritten.
           # If CLOBBER is false, existing files are not overwritten.
           CLOBBER=false

           # The root of the TSS directory tree.
           TWROOT="/usr"

           # Tripwire binaries are stored in TWBIN.
           TWBIN="${TWROOT}/bin"

           # Tripwire policy files are stored in TWPOLICY.
           TWPOLICY="${TWROOT}/TSS/policy"

           # Tripwire manual pages are stored in TWMAN.
           TWMAN="${TWROOT}/man"

           # Tripwire database files are stored in TWDB.
           TWDB="${TWROOT}/TSS/db"

           # The Tripwire site key files are stored in TWSITEKEYDIR.
           TWSITEKEYDIR="${TWROOT}/TSS/key"

           # The Tripwire local key files are stored in TWLOCALKEYDIR.
           TWLOCALKEYDIR="${TWROOT}/TSS/key"

           # Tripwire report files are stored in TWREPORT.
           TWREPORT="${TWROOT}/TSS/report"

           # This sets the default text editor for Tripwire.
           TWEDITOR="/bin/vi"

           # TWLATEPROMTING controls the point when tripwire asks for a password.
           TWLATEPROMPTING=false

           # TWLOOSEDIRCHK selects whether the directory should be monitored for 
           # properties that change when files in the directory are monitored.
           TWLOOSEDIRCHK=false

           # TWMAILNOVIOLATIONS determines whether Tripwire sends a no violation 
           # report when integrity check is run with --email-report but no rule
           # violations are found.  This lets the admin know that the integrity 
           # was run, as opposed to having failed for some reason.
           TWMAILNOVIOLATIONS=true

           # TWEMAILREPORTLEVEL determines the verbosity of e-mail reports.
           TWEMAILREPORTLEVEL=3

           # TWREPORTLEVEL determines the verbosity of report printouts.
           TWREPORTLEVEL=3

           # TWSYSLOG determines whether Tripwire will log events to the system log
           TWSYSLOG=false

           #####################################
           # Mail Options - Choose the appropriate
           # method and comment the other section
           #####################################

           #####################################
           # SENDMAIL options - DEFAULT
           #
           # Either SENDMAIL or SMTP can be used to send reports via TWMAILMETHOD.
           # Specifies which sendmail program to use.
           #####################################

           TWMAILMETHOD=SENDMAIL
           TWMAILPROGRAM="/usr/lib/sendmail -oi -t"

           #####################################
           # SMTP options
           #
           # TWSMTPHOST selects the SMTP host to be used to send reports.
           # SMTPPORT selects the SMTP port for the SMTP mail program to use.
           #####################################

           # TWMAILMETHOD=SMTP
           # TWSMTPHOST="mail.domain.com"
           # TWSMTPPORT=25

           ################################################################################
           # Copyright (C) 1998-2000 Tripwire (R) Security Systems, Inc. Tripwire (R) is a
           # registered trademark of the Purdue Research Foundation and is licensed
           # exclusively to Tripwire (R) Security Systems, Inc.
           ################################################################################

    Note: 该文件install.cfg是由安装程序使用的 Bourne shell 脚本，用于设置配置变量。这些变量指定安装程序将复制文件的目标目录，以及如果安装过程将覆盖现有的 Tripwire 软件文件，安装程序应该执行的操作。

  2. 现在我们必须运行安装脚本，根据您使用的是默认配置值还是自定义配置值，将 Tripwire 二进制文件和相关文件安装到我们的系统上。要运行安装脚本并安装 Tripwire，请使用以下命令
               [root@deep ]/tmp#./install.sh

    Important: install.sh 文件是安装脚本，您运行它以开始安装 Tripwire。在安装过程中，您将

    1. 回答一些与安装相关的问题。

    2. 指定两个用于您的站点和本地密钥的密码短语。

  3. 当 Tripwire 安装在我们的系统中时，它将复制License.txt, README和Release_Notes文件到/usr目录下。当然，在阅读完这些文件后，您可以安全地从您的/usr目录中删除它们，使用以下命令：要从您的系统中删除这些文件，请使用以下命令
               [root@deep ]/usr# rm -f  /usr/License.txt README Release_Notes

别忘了稍后清理
           [root@deep] /#cd /var/tmp
           [root@deep ]/tmp# rm -rf License.txt README Release-Notes install.cfg install.sh pkg/ Tripwire_version_for_Linux_x86_tar.gz
上面使用的 rm 命令将删除我们用于安装 Linux 版 Tripwire 的所有相关文件和目录。它还将从/var/tmp目录中删除 Linux 版 Tripwire 压缩包。

上一页主页下一页
Linux Tripwire 2.2.1向上配置文件