[Question] Why check for Tripwire instead of AIDE

[edmundlod]

Hi,

Just a question: Why do you check for Tripwire and not for AIDE? I cross-referenced the CIS guides for Debian 12 and 11, and it goes with AIDE (only mentioning that it is a tool similar to Tripwire).

I also checked the DISA STIG for the latest Ubuntu, which also uses AIDE.

[DatScreamer]

Yes this is a significant issue with the script. AIDE seems to be recommended more for modern linux systems such as debian 12, and Tripwire has compatibility issues which lead to segfaults on some modern linux systems like my debian 12 environment.

sudo tripwire --init
Parsing policy file: /etc/tripwire/tw.pol
Generating the database...
*** Processing Unix File System ***
Software interrupt forced exit: Segmentation Fault
Segmentation fault

[ThibaultDewailly]

it's legacy and must be modernized