Мониторинг изменений конфигураций linux
apt-get install tripwire
twadmin --generate-keys --local-keyfile /etc/tripwire/$(HOSTNAME)-local.key
twadmin --generate-keys --local-keyfile /etc/tripwire/root-local.key
twadmin --generate-keys --site-keyfile /etc/tripwire/site.key
twadmin --create-cfgfile -S /etc/tripwire/site.key /etc/tripwire/twcfg.txt
twadmin --create-polfile -S /etc/tripwire/site.key /etc/tripwire/twpol.txt
tripwire --init
tripwire --check --quiet --email-report >/var/log/tripware.log
tripwire --check --quiet --email-report --email-report-level 1 >/var/log/tripware.log
nano /etc/cron.d/tripire
30 3 * * 1-6 root test -x /usr/sbin/tripwire && /usr/sbin/tripwire --check --qu$
30 3 * * 0 root test -x /usr/sbin/tripwire && /usr/sbin/tripwire --check --quie$
rm -f /etc/cron.daily/tripwire
tripware --update-policy --secure-mode low /etc/tripwire/twpol.txt
tripwire --update-policy --secure-mode low /etc/tripwire/twpol.txt