Recipe 1.14 Checking Windows VFAT Filesystems

1.14.1 Problem

When checking the integrity of a VFAT filesystem, tripwire always complains that files have changed when they haven't.

1.14.2 Solution

Tell tripwire not to compare inode numbers.

filename -> rule -i ;

For example:

/mnt/windows/system  -> $(SEC_BIN) -i ;

1.14.3 Discussion

Modern Linux kernels do not assign constant inode numbers in VFAT filesystems.

1.14.4 See Also

The Tripwire manual has detailed documentation on the policy file format.

    Chapter 9. Testing and Monitoring