How To Install tripwire on Fedora 34

tripwire is IDS (Intrusion Detection System)

Introduction

In this tutorial we learn how to install tripwire on Fedora 34.

What is tripwire

Tripwire is a very valuable security tool for Linux systems, if it is installed to a clean system. Tripwire should be installed right after the OS installation, and before you have connected your system to a network (i.e., before any possibility exists that someone could alter files on your system). When Tripwire is initially set up, it creates a database that records certain file information. Then when it is run, it compares a designated set of files and directories to the information stored in the database. Added or deleted files are flagged and reported, as are any files that have changed from their previously recorded state in the database. When Tripwire is run against system files on a regular basis, any file changes will be spotted when Tripwire is run. Tripwire will report the changes, which will give system administrators a clue that they need to enact damage control measures immediately if certain files have been altered.

We can use yum or dnf to install tripwire on Fedora 34. In this tutorial we discuss both methods but you only need to choose one of method to install tripwire.

Install tripwire on Fedora 34 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install tripwire using dnf by running the following command:

sudo dnf -y install tripwire

Install tripwire on Fedora 34 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

The output should look something like this:

Fedora 34 - x86_64                               20 kB/s | 6.6 kB     00:00
Fedora 34 openh264 (From Cisco) - x86_64        1.4 kB/s | 989  B     00:00
Fedora Modular 34 - x86_64                       68 kB/s | 6.5 kB     00:00
Fedora 34 - x86_64 - Updates                    3.5 kB/s | 6.2 kB     00:01
Fedora Modular 34 - x86_64 - Updates             17 kB/s | 5.9 kB     00:00
Metadata cache created.

After updating yum database, We can install tripwire using yum by running the following command:

sudo yum -y install tripwire

How To Uninstall tripwire on Fedora 34

To uninstall only the tripwire package we can use the following command:

sudo dnf remove tripwire

tripwire Package Contents on Fedora 34

/etc/cron.daily/tripwire-check
/etc/tripwire
/etc/tripwire/twcfg.txt
/etc/tripwire/twpol.txt
/usr/lib/.build-id
/usr/lib/.build-id/50
/usr/lib/.build-id/50/1442a21b4794467a3533103d4207e8edd00f6d
/usr/lib/.build-id/60
/usr/lib/.build-id/60/ba1f7a8696e0536c0b7883f89096ff0fc12747
/usr/lib/.build-id/65
/usr/lib/.build-id/65/b7af1a3ef5e6246fed3b342e5e50b53011a248
/usr/lib/.build-id/f6
/usr/lib/.build-id/f6/f7d465f5640ec38e378d1e2873f4f8102f505d
/usr/sbin/siggen
/usr/sbin/tripwire
/usr/sbin/tripwire-setup-keyfiles
/usr/sbin/twadmin
/usr/sbin/twprint
/usr/share/doc/tripwire
/usr/share/doc/tripwire/COMMERCIAL
/usr/share/doc/tripwire/COPYING
/usr/share/doc/tripwire/ChangeLog
/usr/share/doc/tripwire/License-Issues
/usr/share/doc/tripwire/README.Fedora
/usr/share/doc/tripwire/TRADEMARK
/usr/share/doc/tripwire/policyguide.txt
/usr/share/doc/tripwire/tripwire.gif
/usr/share/man/man4/twconfig.4.gz
/usr/share/man/man4/twpolicy.4.gz
/usr/share/man/man5/twfiles.5.gz
/usr/share/man/man8/siggen.8.gz
/usr/share/man/man8/tripwire.8.gz
/usr/share/man/man8/twadmin.8.gz
/usr/share/man/man8/twintro.8.gz
/usr/share/man/man8/twprint.8.gz
/var/lib/tripwire
/var/lib/tripwire/report

References

Summary

In this tutorial we learn how to install tripwire on Fedora 34 using yum and dnf.