[cobalt-users] OT: Tripwire not working??

["Ligard, Vidar" <vligard@xxxxxxxxx>]

Folks,

I've had tripwire compiled and installed on my XTR.
I was doing some edits to my policy today and noticed:
It doesn't ask for any passphrases when I print out any of the files
Twadmin -m p prints out all the policies w/o asking for a passphrase
Twprint -m d prints out the entire database w/o asking for a passphrase

I seem to remember passphrases were required for this. Is that not so??
If I can view those files (as root) w/o a passphrase, so can any attacker

The policy, config and database files are in their default locations, and they are encrypted. Anyone have any ideas??

Tripwire version: 2.3.0.47

Thanks,
Vidar

*****************************************
Vidar Ligard
RHEMA Bible Church - Computer Information Systems
918 258 1588 x2490
*****************************************