Quick instructions to getting Tripwire installed and running on Ubuntu 6.06 LTS (Dapper Drake). For more detailed instructions check out this site.

1. Install Tripwire. Say Yes to everything, and create some passwords.

% sudo apt-get install tripwire
% sudo tripwire -m i

2. Fix the policy. I was getting many errors that looked like:

### Warning: File system error.
### Filename: /root/.Xauthority
### No such file or directory

I removed the non-existent files from the policy file with the following commands:

% sudo cp /etc/tripwire/twpol.txt /etc/tripwire/twpol.txt.bak
% sudo vim /etc/tripwire/twpol.txt
% sudo tripwire --update-policy -Z low /etc/tripwire/twpol.txt

Later, when you need to update the database, such as after running updates (adjust the date and number from then end of the file, or sometimes you can just drop the whole -r flag):

% sudo tripwire -m u -r /var/lib/tripwire/report/closetbox64-20071223-133927.twr

By default, Tripwire will be set to email whenever it sees changes. To quickly check the status, run:

% sudo tripwire --check

I plugged in a 250 GB Seagate 7200.10 hard drive into my Feisty box this evening, and to my surprise, /dev/sdd appeared along with a bunch of stuff in my dmesg output. This is on an NVIDIA Nforce 4 motherboard.

[189006.364000] ata3: exception Emask 0×10 SAct 0×0 SErr 0×150000 action 0×2 frozen
[189006.364000] ata3: hard resetting port
[189013.280000] ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[189013.328000] ata3.00: ata_hpa_resize 1: sectors = 488397168, hpa_sectors = 488397168
[189013.328000] ata3.00: ATA-7: ST3250620AS, 3.AAJ, max UDMA/133
[189013.328000] ata3.00: 488397168 sectors, multi 0: LBA48 NCQ (depth 31/32)
[189013.392000] ata3.00: ata_hpa_resize 1: sectors = 488397168, hpa_sectors = 488397168
[189013.392000] ata3.00: configured for UDMA/133
[189013.392000] ata3: EH pending after completion, repeating EH (cnt=4)
[189013.392000] ata3: EH complete
[189013.396000] scsi 2:0:0:0: Direct-Access     ATA      ST3250620AS      3.AA PQ: 0 ANSI: 5
[189013.396000] ata3: bounce limit 0xFFFFFFFFFFFFFFFF, segment boundary 0xFFFFFFFF, hw segs 61
[189013.400000] SCSI device sdd: 488397168 512-byte hdwr sectors (250059 MB)
[189013.404000] sdd: Write Protect is off
[189013.404000] sdd: Mode Sense: 00 3a 00 00
[189013.408000] SCSI device sdd: write cache: enabled, read cache: enabled, doesn’t support DPO or FUA
[189013.412000] SCSI device sdd: 488397168 512-byte hdwr sectors (250059 MB)
[189013.412000] sdd: Write Protect is off
[189013.412000] sdd: Mode Sense: 00 3a 00 00
[189013.416000] SCSI device sdd: write cache: enabled, read cache: enabled, doesn’t support DPO or FUA
[189013.416000]  sdd: unknown partition table
[189013.432000] sd 2:0:0:0: Attached scsi disk sdd
[189013.432000] sd 2:0:0:0: Attached scsi generic sg4 type 0