Guardian in Snort eingebaut

[people/teissler/ipfire-2.x.git] / config / tripwire / twpol.txt

diff --git a/config/tripwire/twpol.txt b/config/tripwire/twpol.txt
index 5591e7dc4562780e71c1202eecf7d8242454e75f..9cdcce89fc9b746fa58aba044f63f1f02a0d2fd6 100644 (file)
--- a/config/tripwire/twpol.txt
+++ b/config/tripwire/twpol.txt
@@ -33,13 +33,13 @@ SIG_HI        = 100 ;                # Critical files that are significant point
   /bin                                  -> $(SEC_CRIT) ;
   /boot                            -> $(SEC_CRIT) ;
   /etc                             -> $(SEC_CRIT) ;
+  /etc/snort/rules/                -> $(Dynamic)  ;
   /lib                             -> $(SEC_CRIT) ;
   /root                            -> $(SEC_CRIT) ;
   /root/.bash_history              -> $(Dynamic)  ;
   /sbin                            -> $(SEC_CRIT) ;
   /usr                             -> $(SEC_CRIT) ;
-  !/usr/src                                       ;
-  !/usr/share/clamav                               ;
+  /usr/share/clamav                -> $(Dynamic)  ;
   /etc/mtab                        -> $(SEC_CONFIG) -i ; # Inode number changes on any mount/unmount
 
   #don't scan the individual reports