1.14.1 ProblemWhen checking the integrity of a VFAT filesystem, tripwire always complains that files have changed when they haven't. 1.14.2 SolutionTell tripwire not to compare inode numbers. filename -> rule -i ; For example: /mnt/windows/system -> $(SEC_BIN) -i ; 1.14.3 DiscussionModern Linux kernels do not assign constant inode numbers in VFAT filesystems. 1.14.4 See AlsoThe Tripwire manual has detailed documentation on the policy file format. |