Linux file integrity with tripwire

# crucial files integrity check with tripwire http://sourceforge.net/projects/tripwire/
# www.fduran.com

apt-get update
apt-get install tripwire (enter 2 passwords)

# in /etc/tripwire/twpol.txt :
# a) in /root section comment out all of them minus result of:
ls -la /root
# ex:: .bash_history , .bashrc , .profile
# b) comment out /proc


# create initial binary policy from text policy:
twadmin --create-polfile --polfile tw.pol twpol.txt

# create initial database:
tripwire --init --polfile tw.pol

# change & recreate policy file until no more false positives / warnings

# check:
tripwire --check

# crontab daily or weekly: /usr/sbin/tripwire --check 2&>1 > /dev/null

# reports stored in
less /var/lib/tripwire/report/