昨天升级到 Ubuntu 20.10 后,tripwire 出现了段错误,无论是在文件系统扫描时还是在我运行时tripwire --init
。
我运行时得到以下信息tripwire --init --verbose
Open Source Tripwire(R) 2.4.3.7.0 built for x86_64-pc-linux-gnu
Open Source Tripwire 2.4 Portions copyright 2000-2018 Tripwire, Inc. Tripwire is a registered
trademark of Tripwire, Inc. This software comes with ABSOLUTELY NO WARRANTY;
for details use --version. This is free software which may be redistributed
or modified only under certain conditions; see COPYING for details.
All rights reserved.
Opening configuration file: /etc/tripwire/tw.cfg
This file is encrypted.
Opening key file: /etc/tripwire/site.key
Opening key file: /etc/tripwire/xxxxxx-local.key
Please enter your local passphrase:
Opening key file: /etc/tripwire/site.key
Opening policy file: /etc/tripwire/tw.pol
This file is encrypted.
Parsing policy file: /etc/tripwire/tw.pol
Generating the database...
*** Processing Unix File System ***
Processing: /usr/sbin
--- Generating information for: /usr/sbin
Software interrupt forced exit: Segmentation Fault
Segmentation fault (core dumped)
我已卸载并重新安装,但无济于事。
后续内容(2020 年 10 月 28 日添加):我决定从源代码构建和安装(可用这里),并且它安装和初始化都正常。
正如普雷斯顿警官曾经说过的,“这个案子已经结案了。”
答案1
/usr/sbin 中的文件或目录权限可能会导致这种情况。我在 20.04 中遇到了类似的问题,其中一个具有 400 权限的文件导致了这种情况。我只是添加了排除项,在更新我的 twpol.cfg 后它就起作用了