使用tripwire初始化数据库时 – 请吐出一堆与/ proc相关的错误：
- ### Warning: File system error.
- ### Filename: /proc/16982/fd/4
- ### No such file or directory
- ### Continuing...
- ### Warning: File system error.
- ### Filename: /proc/16982/fdinfo/4
- ### No such file or directory
- ### Continuing...
- ### Warning: File system error.
- ### Filename: /proc/16982/task/16982/fd/4
- ### No such file or directory
- ### Continuing...
- ### Warning: File system error.
- ### Filename: /proc/16982/task/16982/fdinfo/4
- ### No such file or directory
- ### Continuing...
- ### Warning: Duplicate object encountered.
- ### /proc/sys/net/ipv6/neigh
这感觉像是噪音. twpol.txt文件具有以下子句：
- #
- # Critical devices
- #
- (
- rulename = "Devices & Kernel information",severity = $(SIG_HI),)
- {
- /dev -> $(Device) ;
- /proc -> $(Device) ;
- }
如果我理解正确的话,会导致tripwire深入关注/ proc的全部内容.它不应该只关心/ proc的静态部分,如驱动程序等,而不是per-pid的东西？它为什么这样发货？
解决方法
我在
LinuxQuestions发现了这篇文章.
修改,以便只检查proc的有趣部分
- # /proc -> $(Device) ;
- /proc/sys -> $(Device) ;
- /proc/cpuinfo -> $(Device) ;
- /proc/modules -> $(Device) ;
