Create a default policy file
twadmin -m P /etc/tripwire/twpol.txt
Cenerate an initial database
/usr/local/sbin/tripwire -m i
Generate a list of discrepancies between the local system and the default policy file list.
/usr/local/sbin/tripwire -m c | grep filename >> twtest.txt
These should be run any time a policy file is edited.
/usr/local/sbin/twadmin -m P /etc/tripwire/twpol.txt
/usr/sbin/tripwire -m i
/usr/sbin/tripwire -m i
Delete the clear text verion of the policy file.
rm /usr/local/etc/tripwire/twcfg.txt /usr/local/etc/tripwire/twpol.txt
Create a clear text version of the current policy file.
/usr/local/sbin/twadmin -m p > /usr/local/etc/tripwire/twpol.txt
Update the pol file
/usr/local/sbin/twadmin --create-polfile -S site.key /usr/local/etc/tripwire/twpol.txt
sending a test email
/usr/sbin/tripwire -m c | mail -s "Tripwire Report from HOST" root@localhost