mtree vs tripwire

Lowell Gilbert freebsd-security-local at be-well.ilk.org
Tue Jan 20 16:40:30 PST 2004


Tillman Hodgson <tillman at seekingfire.com> writes:

> On Thu, Jan 15, 2004 at 08:38:55AM -0500, Lowell Gilbert wrote:
> > Gregory Neil Shapiro <gshapiro at freebsd.org> writes:
> > > I use:
> > > 
> > > mtree -K sha1digest -c -X mtree.exclude -p / > mtree.out
> <snip>
> > > Although I am sure there is a better way to do it with mtree, to
> > > see if something has changed, I repeat the process and diff the
> > > output.
> > 
> > That would be 
> >  mtree < mtree.out
> > to have mtree do it itself.
> 
> I just now tried this:
> 
> [root at athena ~/landmine]# ls -l
> total 41746
> -rw-r--r--  1 root  wheel        46 Jan 20 14:58 mtree.exclude
> -rw-r--r--  1 root  wheel  42713965 Jan 20 16:19 mtree.out
> [root at athena ~/landmine]# mtree < mtree.out
> mtree: line 270131: unknown keyword Burg
> 
> I'm fairly certain that that's not the intended result ;-)
> 
> That line, BTW, is just a file name with a space in it:
> 
>                 link=/opt/SC3U/buildings/Den Burg Bruges.bld
> 
> Am I missing somethign fairly simple?

Hmm.  I've never had this problem, and when I try to trigger it
deliberately, I find that my mtree specification has the spaces in the
filenames escaped.

e.g.,
    foo\040bar\040baz \



More information about the freebsd-security mailing list