logger: Tripwire: MD5 : 413fcf09f7d0a356aa350532fdb3b923 /opt/tripwire/etc/tw.pol
logger: Tripwire: MD5 : 769c0308bcbf747a11f9011f4207dd1e /opt/tripwire/etc/tw.cfg
logger: Tripwire: MD5 : 5c6ed847d2eb3050ced52d6fc68c7cca /opt/tripwire/sbin/tripwire
Note: Report is not encrypted.
Open Source Tripwire(R) 2.4.1 Integrity Check Report
Report generated by: root
Report created on: Tue Nov 22 04:04:30 2011
Database last updated on: Never
===============================================================================
Report Summary:
===============================================================================
Host name: bpg.utoledo.edu
Host IP address: 136.247.200.15
Host ID: None
Policy file used: /opt/tripwire/etc/tw.pol
Configuration file used: /opt/tripwire/etc/tw.cfg
Database file used: /opt/tripwire/db/bpg.utoledo.edu.twd
Command line used: /opt/tripwire/sbin/tripwire --check --cfgfile /opt/tripwire/etc/tw.cfg
===============================================================================
Rule Summary:
===============================================================================
-------------------------------------------------------------------------------
Section: Unix File System
-------------------------------------------------------------------------------
Rule Name Severity Level Added Removed Modified
--------- -------------- ----- ------- --------
Invariant Directories 66 0 0 0
* Tripwire Data Files 100 1 0 0
* Critical devices 100 0 0 3
Tripwire Binaries 100 0 0 0
* User binaries 66 342 12 2251
* File System and Disk Administraton Programs
100 0 0 42
* Kernel Administration Programs 100 0 0 8
* Networking Programs 100 0 0 19
* System Administration Programs 100 0 0 17
* Hardware and Device Control Programs
100 0 0 4
* System Information Programs 100 0 0 2
* Application Information Programs
100 0 0 2
* Critical Utility Sym-Links 100 0 0 23
* Security Control 100 1 0 47
* Login Scripts 100 1 0 22
* Critical configuration files 100 110 30 301
* System boot changes 100 4967 1458 79
* OS executables and libraries 100 42 10 907
* Operating System Utilities 100 0 0 43
* Shell Binaries 100 0 0 6
* Libraries 66 16142 1637 14433
* Critical system boot files 100 24 7 3
(/boot)
* Root config files 100 5829 1 25
Total objects scanned: 49007
Total violations found: 48851
===============================================================================
Object Detail:
===============================================================================
-------------------------------------------------------------------------------
Section: Unix File System
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Rule Name: Critical devices (/dev/mem)
Severity Level: 100
-------------------------------------------------------------------------------
----------------------------------------
Modified Objects: 1
----------------------------------------
Modified object name: /dev/mem
Property: Expected Observed
------------- ----------- -----------
* Device Number 15 16
-------------------------------------------------------------------------------
Rule Name: Critical devices (/dev/null)
Severity Level: 100
-------------------------------------------------------------------------------
----------------------------------------
Modified Objects: 1
----------------------------------------
Modified object name: /dev/null
Property: Expected Observed
------------- ----------- -----------
* Device Number 15 16
-------------------------------------------------------------------------------
Rule Name: Critical devices (/dev/zero)
Severity Level: 100
-------------------------------------------------------------------------------
----------------------------------------
Modified Objects: 1
----------------------------------------
Modified object name: /dev/zero
Property: Expected Observed
------------- ----------- -----------
* Device Number 15 16
-------------------------------------------------------------------------------
Rule Name: Tripwire Data Files (/opt/tripwire/db)
Severity Level: 100
-------------------------------------------------------------------------------
----------------------------------------
Added Objects: 1
----------------------------------------
Added object name: /opt/tripwire/db/bpg.utoledo.edu.twd
-------------------------------------------------------------------------------
Rule Name: User binaries (/sbin)
Severity Level: 66
-------------------------------------------------------------------------------
----------------------------------------
Added Objects: 28
----------------------------------------
Added object name: /sbin/mpath_prio_intel.static
Added object name: /sbin/brcm_iscsiuio
Added object name: /sbin/iscsistart
Added object name: /sbin/iscsi-iname
Added object name: /sbin/dumpe4fs
Added object name: /sbin/e4undo
Added object name: /sbin/mpath_prio_weighted
Added object name: /sbin/e4image
Added object name: /sbin/finde4fs
Added object name: /sbin/mpath_prio_intel
Added object name: /sbin/mpath_prio_hp_sw
Added object name: /sbin/e4label
Added object name: /sbin/iscsid
Added object name: /sbin/fsck.ext4dev
Added object name: /sbin/debuge4fs
Added object name: /sbin/resize4fs
Added object name: /sbin/e4fsck
Added object name: /sbin/tune4fs
Added object name: /sbin/iscsiadm
Added object name: /sbin/mpath_prio_weighted.static
Added object name: /sbin/sgpio
Added object name: /sbin/dmevent_tool
Added object name: /sbin/mkfs.ext4
Added object name: /sbin/fsck.ext4
Added object name: /sbin/mpath_prio_hp_sw.static
Added object name: /sbin/mke4fs
Added object name: /sbin/mkfs.ext4dev
Added object name: /sbin/dm_dso_reg_tool
----------------------------------------
Removed Objects: 1
----------------------------------------
Removed object name: /sbin/aulastlog
----------------------------------------
Modified Objects: 146
----------------------------------------
Modified object name: /sbin
Property: Expected Observed
------------- ----------- -----------
* Modify Time Tue May 5 18:34:52 2009 Sat Jun 4 04:10:42 2011
Modified object name: /sbin/MAKEDEV
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341204 4341286
* CRC32 Cu53e9 BJVjNn
* MD5 AJd4Q8BxbiBf+5SIoicYTx BpOjwutYZPa2PpfzW4fcJD
Modified object name: /sbin/addpart
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341237 4341330
* Size 5796 5896
* Modify Time Sat May 24 19:06:23 2008 Thu Mar 10 08:28:15 2011
* CRC32 CDr8T2 CgKEVQ
* MD5 D8hoE+qbUZkzHaZmxYD7V5 BuUQcUga2n+6lmG0QdPBEd
Modified object name: /sbin/agetty
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341230 4341370
* Size 20340 20436
* Modify Time Sat May 24 19:06:23 2008 Thu Mar 10 08:28:15 2011
* CRC32 BMH/K+ CgB0mV
* MD5 AwsUoCpLsj1tp9APerssxt DWY0N4Pk0eFlJr3ItAb2C6
Modified object name: /sbin/alsactl
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341191 4341337
* Size 49028 53136
* Modify Time Sat May 24 17:04:00 2008 Wed Jan 21 02:45:03 2009
* Blocks 96 112
* CRC32 DI7cYT Dc96ax
* MD5 CWvvYWNC98qRI14r2iy9xq AtYo5/IgEKKFEQ5IA15gQG
Modified object name: /sbin/arping
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341150 4341221
* Size 13528 14896
* Modify Time Wed Mar 14 13:26:13 2007 Sat Sep 26 15:34:10 2009
* CRC32 C1CFu5 AWVyQy
* MD5 DLUF4i6hVWM5l+Ag1jeObW CehYp+A8iaDdRGKZ7oUr2x
Modified object name: /sbin/audispd
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341280 4341290
* Size 75444 87736
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 160 184
* CRC32 ACfV7U AM9CJd
* MD5 ASKKH8qx7KeVdd4MI2ZbnK A5efO5vRK0EKtHeui3/Obk
Modified object name: /sbin/auditctl
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341347 4341144
* Size 97440 113496
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 200 232
* CRC32 Cwfpja DxJXTh
* MD5 AnecRamFentx4BCbN2F/UK Ayy5O45mKKTKUY39Lc+jBs
Modified object name: /sbin/auditd
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341282 4341216
* Size 108396 165872
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 224 336
* CRC32 DvfJfV AMzuRd
* MD5 CPM87xRbHjKTZgm4j3wAAR De0evHtb4S7ixF+Yn2fqro
Modified object name: /sbin/aureport
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341175 4341211
* Mode -rwxr-x--- -rwxr-xr-x
* Size 111896 134788
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 232 272
* CRC32 D2rTLu C32ceo
* MD5 AAtAfBzgOCJ/3oo5rlvQaU DFiTBvU3PpXz35UhvvGDnb
Modified object name: /sbin/ausearch
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341279 4341307
* Mode -rwxr-x--- -rwxr-xr-x
* Size 123900 149156
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 256 304
* CRC32 A44k1S ClJn/s
* MD5 BD0hTaDozcxCgOBRCfzH1P DsViaZMZAEjChI7rhogFu7
Modified object name: /sbin/autrace
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341365 4341318
* Size 75956 88556
* Modify Time Sun May 25 02:28:16 2008 Sat Mar 5 20:22:55 2011
* Blocks 160 184
* CRC32 CBHpTc CbkEaM
* MD5 Cl+WybpS3Tgnw+rSmKjL2V DEDshWXVoCxqwiNIInt+rx
Modified object name: /sbin/blkid
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341248 4341132
* Size 10008 10120
* Modify Time Sat May 24 18:33:41 2008 Thu Nov 11 13:39:52 2010
* CRC32 CNQwSo DkQIxu
* MD5 DL0+MjvDRV4xm0CMcbonnq A6KdhuFer+EtDYi3Ipk40j
Modified object name: /sbin/blockdev
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341162 4341227
* Modify Time Sat May 24 19:06:23 2008 Thu Mar 10 08:28:15 2011
* CRC32 Br4zoB BIWrGC
* MD5 DLr3P7tZ0JhASkXCeRPqnQ C6sNuudxmvIsmQtlQiSe/5
Modified object name: /sbin/busybox.anaconda
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341159 4341136
* Modify Time Mon May 26 06:45:00 2008 Thu Sep 3 13:17:34 2009
* CRC32 DNoLgN DtHJ7V
* MD5 BKTGLdKYH6VXB+6aatmCbc A7ru8eVpQAm5TTUtucWBSE
Modified object name: /sbin/cbq
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341132 4341317
* Modify Time Sun May 25 02:50:39 2008 Tue Jan 26 17:06:37 2010
Modified object name: /sbin/cciss_id
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341311 4341379
* Size 7736 7908
* Modify Time Sat May 24 23:06:24 2008 Thu Mar 31 00:22:10 2011
* CRC32 B1t4Nj CjSwYe
* MD5 A+VHhrheqZHjHXZ14n4Gft DWlYMnwjxT2+Y8ztK5rbhN
Modified object name: /sbin/change_console
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341253 4341123
* Size 5976 6024
* Modify Time Sat Jan 6 13:11:11 2007 Wed Jan 21 03:22:13 2009
* CRC32 CcAyWy BwSrxP
* MD5 DWr7/B3ioLxaijXY85NQe6 C3/ehLBFQkZAjrz8ckNqP4
Modified object name: /sbin/cryptsetup
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341287 4341236
* Size 1203844 1232356
* Modify Time Wed Mar 21 17:55:26 2007 Thu Sep 3 08:22:57 2009
* Blocks 2360 2416
* CRC32 ApuNAC B1rIBn
* MD5 Dsa4ErmQELkKygv4Q9an8Y DDJpfIiyu6dfxF/vRj7J5M
Modified object name: /sbin/delpart
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341321 4341189
* Size 5664 5764
* Modify Time Sat May 24 19:06:23 2008 Thu Mar 10 08:28:15 2011
* CRC32 A2GNM4 B0zHqU
* MD5 CkI7f5pfk/dxAuL0hV7EOP D2tGX8WKJVw2T4qSbysc6v
Modified object name: /sbin/dhcdbd
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341360 4341380
* Size 103048 103116
* Modify Time Wed Mar 14 09:06:02 2007 Thu Feb 26 18:54:44 2009
* CRC32 DAps1D AhzgtT
* MD5 AIuJqbHuoNxrNUQbVBJMf2 BLAI0izMPM6mZzC6/jfH5k
Modified object name: /sbin/dhclient
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341251 4341367
* Modify Time Sun May 25 01:02:57 2008 Tue Apr 12 18:30:27 2011
* CRC32 AFxCyh B34cEL
* MD5 DAeBOnTgeMU/CWaI8FDG+c DF248rQgl4LQ9YYtfD2Zis
Modified object name: /sbin/dhclient-script
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341252 4341377
* Size 18285 18780
* Modify Time Sun May 25 01:02:53 2008 Tue Apr 12 18:30:20 2011
* CRC32 BTLI2+ Bzhqwr
* MD5 COzOePVpV+FOVD4vAB7W34 D9CChwafoC6gUpNdg9K34k
Modified object name: /sbin/dmeventd
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341151 4341176
* Size 25864 27164
* Modify Time Sat May 24 15:43:01 2008 Sat Mar 5 22:27:39 2011
* CRC32 CC4rI0 BEgq+x
* MD5 CUrDs5aI7Q4EYKbhX45CF1 DxjHb2E6k+PRJoBYJU/SCv
Modified object name: /sbin/dmraid
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341232 4341299
* Size 17692 19204
* Modify Time Sat May 24 17:55:03 2008 Wed Mar 31 07:39:12 2010
* CRC32 CcWlBM AVU63w
* MD5 BWbRr1AuBMiWa+NnVdz1qD CN1Xj+n2rNdDhQ93xjO6rz
Modified object name: /sbin/dmraid.static
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341216 4341354
* Size 994788 1075172
* Modify Time Sat May 24 17:55:03 2008 Wed Mar 31 07:39:12 2010
* Blocks 1952 2112
* CRC32 ANwp6u Ao1cml
* MD5 DSnep+glxM4HQRgp38UrzM BC6Qm6/4JHq7Tp/HuxCuF4
Modified object name: /sbin/dmsetup
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341138 4341235
* Size 47628 56536
* Modify Time Sat May 24 15:43:01 2008 Sat Mar 5 22:27:39 2011
* Blocks 96 120
* CRC32 BEFF+P Boo8hv
* MD5 CbEHv2KvJCfg/4RS5cxgCr CAijTC2EZUlMlWVLGEaFZO
Modified object name: /sbin/dmsetup.static
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341173 4341142
* Size 902396 991208
* Modify Time Sat May 24 15:43:01 2008 Sat Mar 5 22:27:39 2011
* Blocks 1776 1944
* CRC32 D1V8D0 CaT5CZ
* MD5 CaPufzhfC0X86Iub4qt9eH DwMAqgDTdWW6616uZuxp21
Modified object name: /sbin/dosfslabel
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341319 4341313
* Size 50400 50612
* Modify Time Wed Mar 14 09:03:25 2007 Tue Jan 26 18:58:51 2010
* CRC32 BMBgKa AJYqZM
* MD5 B0qYUWpEi88OPcEd8UpuQw Dw+xDFlcNGv0GXyTPbDsRs
Modified object name: /sbin/e2image
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341186 4341191
* Size 15972 15636
* Modify Time Sat May 24 18:33:41 2008 Thu Nov 11 13:39:52 2010
* CRC32 CSwXBs AqCN81
* MD5 DXMR5QZDA736VelLNuWsj5 D7zBek21IGO1F4C++FG3Xj
Modified object name: /sbin/ether-wake
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341336 4341287
* Modify Time Sun May 25 02:25:43 2008 Tue Jan 26 18:43:34 2010
* CRC32 CieXIO AhVXCV
* MD5 BnqfecqjGM/vNUktiChd2p BH6K1yxjixWx2bZl9zerZ1
Modified object name: /sbin/ethtool
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341126 4341212
* Size 103864 119912
* Modify Time Wed Mar 14 10:16:18 2007 Fri Apr 2 22:56:18 2010
* Blocks 216 248
* CRC32 B3fYBx CDKrHj
* MD5 CFMVdTE0gtu2yPM+AQBiOV B+PT5x06Jo3lJ0TDCzv/zq
Modified object name: /sbin/extlinux
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341309 4341325
* CRC32 DZMaGx CutYQt
* MD5 Ana2t0vsio+C1HmUPByBuW ALPfZ2HZKkFcyRRYeeuTFt
Modified object name: /sbin/findfs
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341147 4341125
* Size 25432 25524
* Modify Time Sat May 24 18:33:41 2008 Thu Nov 11 13:39:52 2010
* CRC32 BUAOIZ Acob6r
* MD5 Af8XgWU9mie8QpgAPjYD1n BrAy11NsuAsjjvHFSURfoc
Modified object name: /sbin/firmware_helper
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341295 4341179
* Modify Time Sun May 25 03:08:11 2008 Sat Mar 5 23:11:49 2011
* CRC32 Bqq1kK DtzYg9
* MD5 CaOsk0yv19fDqC0Dj49RtG Cc2r+JoSZyBB+Uqfy6L+eE
Modified object name: /sbin/fixfiles
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341361 4341308
* Size 6114 6083
* Modify Time Sat May 24 17:20:34 2008 Fri Apr 2 23:09:27 2010
* CRC32 Boe+nO A1+2Kx
* MD5 AJRHHEfxPo+RSpPqWFoP27 A9j35gj3v9HMHlnOL++PGZ
Modified object name: /sbin/fsck.cramfs
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341366 4341363
* Size 9472 9568
* Modify Time Sat May 24 19:06:23 2008 Thu Mar 10 08:28:15 2011
* CRC32 CaLq8S C46Wsl
* MD5 DZn3rG5fdq54Lt6inVGfkj C5cG1BN8ahpwoPBzLb8imX
Modified object name: /sbin/fsck.ext3
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341200 4341230
* Size 1067008 1120480
* Modify Time Sat May 24 18:33:41 2008 Thu Nov 11 13:39:52 2010
* Blocks 2096 2200
* CRC32 BjmkzX A05Ph1
* MD5 Cl/ANhWZf2XtzJq7vIlUwS DlIvXfc99ECezMWSUeHDX+
Modified object name: /sbin/fsck.vfat
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341143 4341302
* Size 52360 52568
* Modify Time Wed Mar 14 09:03:25 2007 Tue Jan 26 18:58:51 2010
* CRC32 D+7pB2 BjVffu
* MD5 DBp9t0tJigTRlwSaL3Wl8g Aia5uYCI3SO4gooXmpCpbE
Modified object name: /sbin/fstab-decode
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341214 4341223
* Size 5616 5716
* Modify Time Wed Oct 1 17:31:26 2008 Mon Jan 31 20:14:16 2011
* CRC32 A7XdI9 DXz8ur
* MD5 BVq9N7kvn3Z35gWvyrg8RE AxHIc2zuga2BXG20hS8ZQO
Modified object name: /sbin/generate-modprobe.conf
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341182 4341203
* Modify Time Sat May 24 15:24:45 2008 Mon Oct 11 07:31:15 2010
Modified object name: /sbin/genhostid
Property: Expected Observed
------------- ----------- -----------
* Inode Number 4341226 4341368
* Size 5260 5360