Nothing, I suspect, other than you might have preset mount options set in fstab that conflict, and you might confuse everybody when they can't find the CD-ROM when mount tells them it is already mounted !!! I seem to remember that there was a wire you could cut/switch on older hard drive cables that would turn a disk into read-only. A friend of mine used it to turn an old PC into a sort of diskless set-up. If that still works, you could use an old HD on a spare IDE channel, with a key or hidden switch, mount it in the right place, and be able to update the tripwire database at will. BTW, running tripwire does involve a certain amount of upkeep if you try to cover too much, of have a lot of file (legitimate) changes, like users uploading to web space. Regards, Marco -----Original Message----- From: Gerhard Sittig [SMTP:Gerhard.Sittig@gmx.net] Sent: Friday, May 11, 2001 7:44 AM To: 'suse-security@suse.com' Subject: Re: [suse-security] tripwire On Thu, May 10, 2001 at 21:18 +0100, Marco van Beek wrote:

I have installed Tripwire on a SuSE 7.1 server, and found that tw-config needs to end up in /var/adm/tripwire, and after initialising, the database needs to be moved from /var/adm/tripwire/bin/databases to /var/adm/tripwire/db for the command to work without any additional commands. You wouldn't run a production machine like this, you would add a switch to the command line after moving the db to some read only media.

What keeps you from mounting the media with the tripwire database as well as the configuration under this very directory? :> virtually yours 82D1 9B9C 01DC 4FB4 D7B4 61BE 3F49 4F77 72DE DA76 Gerhard Sittig true | mail -s "get gpg key" Gerhard.Sittig@gmx.net -- If you don't understand or are scared by any of the above ask your parents or an adult to help you. --------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com