Tripwire and Email

Tripwire can email someone if a particular rule in the policy file is violated. To do this, the sample policy file, /etc/tripwire/twpol.txt
must be modified. Add an emailto line to the rule directive section of each rule for which the administrator wishes to be notified when violations occur.
For example,

        (
          rulename = "Networking Programs",
          severity = $(SIG_HI),
          emailto = watson@pa.msu.edu
        )
      

Once the changes have been made, the policy file must be signed.

For additional information, see RedHat.com Documentation

Back to Tripwire Documentation Home

Back to System Administrators' Information