38. Tripwire file monitoring [Not finished yet]

Tripwire is a file monitoring application that can be configured to notify the administrator if any files have been altered. With a system like this in place, administrators will have a clear picture of what files have been changed during:

• file system corruption
• accidental changes
• hacker intrusion

- First, download the tripwire software from Section 5 and put it into a temporary directory

- Next, decompress it:

                tar -xzvf tripwire-*.tar.Z

                tar -xvf T1.2.tar

- Now go into the new tripwire-1.2 source dir

- Edit Makefile

# out CC = cc

and un#ed out

CC = gcc

# out LEX = lex

Un#ed out

LEX = flex

# out YACC = yacc

un#ed out:

YACC = bison -y