This is an automated report of possible file integrity changes, generated by
the Tripwire integrity checker.
Changed files/directories include:
Parsing policy file: /etc/tripwire/tw.pol
*** Processing Unix File System ***
Performing integrity check...
Wrote report file: /var/lib/tripwire/report/Mallard-20010617-074121.twr
Tripwire(R) 2.3.0 Integrity Check Report
Report generated by: root
Report created on: Sun Jun 17 07:41:21 2001
Database last updated on: Never
===============================================================================
Report Summary:
===============================================================================
Host name: Mallard
Host IP address: 192.168.1.25
Host ID: None
Policy file used: /etc/tripwire/tw.pol
Configuration file used: /etc/tripwire/tw.cfg
Database file used: /var/lib/tripwire/Mallard.twd
Command line used: /usr/sbin/tripwire -m c
===============================================================================
Rule Summary:
===============================================================================
-------------------------------------------------------------------------------
Section: Unix File System
-------------------------------------------------------------------------------
Rule Name Severity Level Added Removed Modified
--------- -------------- ----- ------- --------
Invariant Directories 66 0 0 0
* Tripwire Data Files 100 0 0 1
Temporary directories 33 0 0 0
Critical devices 100 0 0 0
* Other binaries 66 287 114 1319
Tripwire Binaries 100 0 0 0
* File System and Disk Administration Programs
100 0 2 41
* Kernel Administration Programs 100 0 0 11
* Networking Programs 100 0 4 11
* System Administration Programs 100 0 0 20
* Hardware and Device Control Programs
100 0 0 8
* Directory Service Programs 100 0 0 1
* System Information Programs 100 0 0 11
* Security Control 100 0 0 10
* Critical system boot files 100 117 3 17
* Critical Utility Sym-Links 100 0 3 18
* Critical configuration files 100 6 2 19
* Libraries 66 2441 4027 3562
* Operating System Utilities 100 2 0 99
* Shell Binaries 100 0 0 3
* Application Information Programs
100 0 0 1
* System Support Programs 100 0 0 1
* System boot changes 100 60 21 83
* Critical Libraries 100 69 22 97
(/lib)
* Other configuration files 66 153 28 401
(/etc)
Login Scripts 100 0 0 0
* Boot Scripts 100 36 12 19
* Root config files 100 2 0 7
Total objects scanned: 15260
Total violations found: 13171
===============================================================================
Object Summary:
===============================================================================
-------------------------------------------------------------------------------
# Section: Unix File System
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Rule Name: Other binaries (/usr/sbin)
Severity Level: 66
-------------------------------------------------------------------------------
Added:
"/usr/sbin/quot"
"/usr/sbin/stormpkg"
"/usr/sbin/update-mime"
"/usr/sbin/termwrap"
"/usr/sbin/eximon"
"/usr/sbin/xqmstats"
"/usr/sbin/update-fonts-dir"
"/usr/sbin/convertquota"
"/usr/sbin/cupsd"
"/usr/sbin/lpinfo"
"/usr/sbin/update-catalog"
"/usr/sbin/lpmove"
"/usr/sbin/accept"
"/usr/sbin/guile1.4-slibconfig"
"/usr/sbin/lpadmin"
"/usr/sbin/reject"
"/usr/sbin/cupsaccept"
"/usr/sbin/cupsreject"
"/usr/sbin/base-config"
"/usr/sbin/tzsetup"
"/usr/sbin/snort"
"/usr/sbin/snort-stat"
Removed:
"/usr/sbin/checkpc"
"/usr/sbin/etherape"
"/usr/sbin/freeramdisk"
"/usr/sbin/guile-slibconfig"
"/usr/sbin/interape"
"/usr/sbin/ip6tables"
"/usr/sbin/lpc"
"/usr/sbin/lpd"
Modified:
"/usr/sbin"
"/usr/sbin/3c5x9setup"
"/usr/sbin/MAKEFLOPPIES"
"/usr/sbin/accessdb"
"/usr/sbin/addgroup"
"/usr/sbin/adduser"
"/usr/sbin/anacron"
"/usr/sbin/apt-setup"
"/usr/sbin/chat"
"/usr/sbin/checksecurity"
"/usr/sbin/chpasswd"
"/usr/sbin/cpgr"
"/usr/sbin/cppw"
"/usr/sbin/cron"
"/usr/sbin/cvs-makerepos"
"/usr/sbin/cvs-pserver"
"/usr/sbin/cvsconfig"
"/usr/sbin/cvt-pppconfig"
"/usr/sbin/delgroup"
"/usr/sbin/deluser"
"/usr/sbin/diald"
"/usr/sbin/dpasswd"
"/usr/sbin/dpkg-preconfigure"
"/usr/sbin/dpkg-reconfigure"
"/usr/sbin/edquota"
"/usr/sbin/el3diag"
"/usr/sbin/exicyclog"
"/usr/sbin/exigrep"
"/usr/sbin/exim"
"/usr/sbin/exim-upgrade-to-r3"
"/usr/sbin/exim_dbmbuild"
"/usr/sbin/exim_dumpdb"
"/usr/sbin/exim_fixdb"
"/usr/sbin/exim_lock"
"/usr/sbin/exim_tidydb"
"/usr/sbin/eximconfig"
"/usr/sbin/eximstats"
"/usr/sbin/exinext"
"/usr/sbin/exiqsumm"
"/usr/sbin/exiwhat"
"/usr/sbin/fdutilsconfig"
"/usr/sbin/gnome-pty-helper"
"/usr/sbin/gpm"
"/usr/sbin/gpm-microtouch-setup"
"/usr/sbin/gpm-mouse-test"
"/usr/sbin/gpmconfig"
"/usr/sbin/groupadd"
"/usr/sbin/groupdel"
"/usr/sbin/groupmod"
"/usr/sbin/grpck"
"/usr/sbin/grpconv"
"/usr/sbin/grpunconv"
"/usr/sbin/inetd"
"/usr/sbin/install-fvwmgenmenu"
"/usr/sbin/install-fvwmgenmenu.sh"
"/usr/sbin/install-keymap"
"/usr/sbin/install-menu"
"/usr/sbin/install-sgmlcatalog"
"/usr/sbin/ispellconfig"
"/usr/sbin/keytab-lilo"
"/usr/sbin/lilo_find_mbr"
"/usr/sbin/liloconfig"
"/usr/sbin/locale-gen"
"/usr/sbin/logrotate"
"/usr/sbin/magicfilter"
"/usr/sbin/magicfilterconfig"
"/usr/sbin/mksmbpasswd"
"/usr/sbin/modconf"
"/usr/sbin/mysqld"
"/usr/sbin/newusers"
"/usr/sbin/nfsstat"
"/usr/sbin/nmbd"
"/usr/sbin/oidentd"
"/usr/sbin/pam_tally"
"/usr/sbin/paperconfig"
"/usr/sbin/pilotconfig"
"/usr/sbin/pppconfig"
"/usr/sbin/pppd"
"/usr/sbin/pppdump"
"/usr/sbin/pppstats"
"/usr/sbin/pwck"
"/usr/sbin/pwconv"
"/usr/sbin/pwunconv"
"/usr/sbin/quotastats"
"/usr/sbin/repquota"
"/usr/sbin/rmail"
"/usr/sbin/rpc.rquotad"
"/usr/sbin/rsmtp"
"/usr/sbin/runq"
"/usr/sbin/safe_finger"
"/usr/sbin/sambaconfig"
"/usr/sbin/saned"
"/usr/sbin/sendmail"
"/usr/sbin/setquota"
"/usr/sbin/setvesablank"
"/usr/sbin/shadowconfig"
"/usr/sbin/smbd"
"/usr/sbin/sshd"
"/usr/sbin/su-to-root"
"/usr/sbin/swat"
"/usr/sbin/syslog-facility"
"/usr/sbin/syslogd-listfiles"
"/usr/sbin/tcpd"
"/usr/sbin/tcpdchk"
"/usr/sbin/tcpdmatch"
"/usr/sbin/tcpdump"
"/usr/sbin/texconfig"
"/usr/sbin/traceroute"
"/usr/sbin/try-from"
"/usr/sbin/tzconfig"
"/usr/sbin/update-fonts-alias"
"/usr/sbin/update-fonts-scale"
"/usr/sbin/update-inetd"
"/usr/sbin/update-ispell-dictionary"
"/usr/sbin/update-vfontcap"
"/usr/sbin/update-xaw-wrappers"
"/usr/sbin/useradd"
"/usr/sbin/userdel"
"/usr/sbin/usermod"
"/usr/sbin/vcstime"
"/usr/sbin/vigr"
"/usr/sbin/vipw"
"/usr/sbin/visudo"
"/usr/sbin/warnquota"
"/usr/sbin/wm-menu-config"
"/usr/sbin/writevt"
"/usr/sbin/zic"