Note: Report is not encrypted. Tripwire(R) 2.3.0 Integrity Check Report Report generated by: root Report created on: Thu Jul 8 08:23:45 2004 Database last updated on: Thu Jul 8 05:35:22 2004 =============================================================================== Report Summary: =============================================================================== Host name: atmarkit.example.co.jp Host IP address: 192.168.0.10 Host ID: None Policy file used: /etc/tripwire/tw.pol Configuration file used: /etc/tripwire/tw.cfg Database file used: /var/lib/tripwire/atmarkit.example.co.jp.twd Command line used: tripwire --check =============================================================================== Rule Summary: =============================================================================== ------------------------------------------------------------------------------- Section: Unix File System ------------------------------------------------------------------------------- Rule Name Severity Level Added Removed Modified --------- -------------- ----- ------- -------- Invariant Directories 66 0 0 0 Temporary directories 33 0 0 0 * Tripwire Data Files 100 0 0 1 Critical devices 100 0 0 0 User binaries 66 0 0 0 Tripwire Binaries 100 0 0 0 Critical configuration files 100 0 0 0 Libraries 66 0 0 0 Shell Binaries 100 0 0 0 File System and Disk Administraton Programs 100 0 0 0 Kernel Administration Programs 100 0 0 0 Networking Programs 100 0 0 0 System Administration Programs 100 0 0 0 Hardware and Device Control Programs 100 0 0 0 System Information Programs 100 0 0 0 Application Information Programs 100 0 0 0 Shell Releated Programs 100 0 0 0 Critical Utility Sym-Links 100 0 0 0 Critical system boot files 100 0 0 0 * System boot changes 100 2 0 0 OS executables and libraries 100 0 0 0 Security Control 100 0 0 0 Login Scripts 100 0 0 0 Operating System Utilities 100 0 0 0 Root config files 100 0 0 0 Total objects scanned: 11285 Total violations found: 3 =============================================================================== Object Detail: =============================================================================== ------------------------------------------------------------------------------- Section: Unix File System ------------------------------------------------------------------------------- ------------------------------------------------------------------------------- Rule Name: System boot changes (/var/log) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Added Objects: 2 ---------------------------------------- Added object name: /var/log/sa/sar07 Added object name: /var/log/sa/sa08 ------------------------------------------------------------------------------- Rule Name: Tripwire Data Files (/etc/tripwire/tw.pol) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /etc/tripwire/tw.pol Property: Expected Observed ------------- ----------- ----------- * Modify Time Mon May 24 03:16:36 2004 Thu Jul 8 08:22:28 2004 * CRC32 Djpzar B9sRf0 * MD5 BZfbm7qmLn1akwRfe+GrzC CWxp1RqABvVumVvmyQJ6mI =============================================================================== Error Report: =============================================================================== ------------------------------------------------------------------------------- Section: Unix File System ------------------------------------------------------------------------------- 1. File system error. Filename: /proc/rtc No such file or directory 2. File system error. Filename: /proc/scsi No such file or directory 3. File system error. Filename: /usr/sbin/fixrmtab No such file or directory 4. File system error. Filename: /usr/kerberos/bin/rsh No such file or directory 5. File system error. Filename: /sbin/ftl_check No such file or directory 6. File system error. Filename: /sbin/ftl_format No such file or directory 7. File system error. Filename: /sbin/mkpv No such file or directory 8. File system error. Filename: /sbin/mtx No such file or directory 9. File system error. Filename: /sbin/pcinitrd No such file or directory 10. File system error. Filename: /sbin/scsi_info No such file or directory 11. File system error. Filename: /sbin/tapeinfo No such file or directory 12. File system error. Filename: /sbin/adjtimex No such file or directory 13. File system error. Filename: /sbin/getty No such file or directory 14. File system error. Filename: /sbin/ifport No such file or directory 15. File system error. Filename: /sbin/ifuser No such file or directory 16. File system error. Filename: /sbin/ipx_configure No such file or directory 17. File system error. Filename: /sbin/ipx_interface No such file or directory 18. File system error. Filename: /sbin/ipx_internal_net No such file or directory 19. File system error. Filename: /sbin/iwconfig No such file or directory 20. File system error. Filename: /sbin/iwpriv No such file or directory 21. File system error. Filename: /sbin/iwspy No such file or directory 22. File system error. Filename: /sbin/rarp No such file or directory 23. File system error. Filename: /sbin/uugetty No such file or directory 24. File system error. Filename: /sbin/vgetty No such file or directory 25. File system error. Filename: /sbin/linuxconf No such file or directory 26. File system error. Filename: /sbin/linuxconf-auth No such file or directory 27. File system error. Filename: /sbin/remadmin No such file or directory 28. File system error. Filename: /sbin/cardctl No such file or directory 29. File system error. Filename: /sbin/cardmgr No such file or directory 30. File system error. Filename: /sbin/isapnp No such file or directory 31. File system error. Filename: /sbin/pnpdump No such file or directory 32. File system error. Filename: /sbin/probe No such file or directory 33. File system error. Filename: /sbin/pump No such file or directory 34. File system error. Filename: /sbin/sash No such file or directory 35. File system error. Filename: /sbin/askrunlevel No such file or directory 36. File system error. Filename: /sbin/dnsconf No such file or directory 37. File system error. Filename: /sbin/fixperm No such file or directory 38. File system error. Filename: /sbin/fsconf No such file or directory 39. File system error. Filename: /sbin/mailconf No such file or directory 40. File system error. Filename: /sbin/managerpm No such file or directory 41. File system error. Filename: /sbin/modemconf No such file or directory 42. File system error. Filename: /sbin/mount.ncp No such file or directory 43. File system error. Filename: /sbin/mount.ncpfs No such file or directory 44. File system error. Filename: /sbin/mount.smb No such file or directory 45. File system error. Filename: /sbin/mount.smbfs No such file or directory 46. File system error. Filename: /sbin/netconf No such file or directory 47. File system error. Filename: /sbin/userconf No such file or directory 48. File system error. Filename: /sbin/uucpconf No such file or directory 49. File system error. Filename: /var/lock/subsys/ypbind No such file or directory 50. File system error. Filename: /var/lock/subsys/syslog No such file or directory 51. File system error. Filename: /var/lock/subsys/lpd No such file or directory 52. File system error. Filename: /var/lock/subsys/sendmail No such file or directory 53. File system error. Filename: /var/lock/subsys/autofs No such file or directory 54. File system error. Filename: /var/lock/subsys/firewall No such file or directory 55. File system error. Filename: /var/lock/subsys/identd No such file or directory 56. File system error. Filename: /var/lock/subsys/jserver No such file or directory 57. File system error. Filename: /var/lock/subsys/reconfig No such file or directory 58. File system error. Filename: /var/lock/subsys/xfs No such file or directory 59. File system error. Filename: /etc/conf.linuxconf No such file or directory 60. File system error. Filename: /etc/hosts.allow No such file or directory 61. File system error. Filename: /etc/hosts.deny No such file or directory 62. File system error. Filename: /etc/smb.conf No such file or directory 63. File system error. Filename: /etc/gettydefs No such file or directory 64. File system error. Filename: /bin/gawk-3.0.4 No such file or directory 65. File system error. Filename: /bin/vimtutor No such file or directory 66. File system error. Filename: /bin/zsh No such file or directory 67. File system error. Filename: /bin/zsh-3.0.8 No such file or directory 68. File system error. Filename: /bin/xnmap No such file or directory 69. File system error. Filename: /bin/ksh No such file or directory 70. File system error. Filename: /root/mail No such file or directory 71. File system error. Filename: /root/Mail No such file or directory 72. File system error. Filename: /root/.xsession-errors No such file or directory 73. File system error. Filename: /root/.xauth No such file or directory 74. File system error. Filename: /root/.sawfish No such file or directory 75. File system error. Filename: /root/.pinerc No such file or directory 76. File system error. Filename: /root/.mc No such file or directory 77. File system error. Filename: /root/.gnome_private No such file or directory 78. File system error. Filename: /root/.gnome-desktop No such file or directory 79. File system error. Filename: /root/.gnome No such file or directory 80. File system error. Filename: /root/.esd_auth No such file or directory 81. File system error. Filename: /root/.elm No such file or directory 82. File system error. Filename: /root/.amandahosts No such file or directory 83. File system error. Filename: /root/.addressbook.lu No such file or directory 84. File system error. Filename: /root/.addressbook No such file or directory 85. File system error. Filename: /root/.Xauthority No such file or directory 86. File system error. Filename: /root/.ICEauthority No such file or directory ------------------------------------------------------------------------------- *** End of report *** Tripwire 2.3 Portions copyright 2000 Tripwire, Inc. Tripwire is a registered trademark of Tripwire, Inc. This software comes with ABSOLUTELY NO WARRANTY; for details use --version. This is free software which may be redistributed or modified only under certain conditions; see COPYING for details. All rights reserved.