head	1.1;
access;
symbols
	pkgsrc-2024Q1:1.1.0.26
	pkgsrc-2024Q1-base:1.1
	pkgsrc-2023Q4:1.1.0.24
	pkgsrc-2023Q4-base:1.1
	pkgsrc-2023Q3:1.1.0.22
	pkgsrc-2023Q3-base:1.1
	pkgsrc-2023Q2:1.1.0.20
	pkgsrc-2023Q2-base:1.1
	pkgsrc-2023Q1:1.1.0.18
	pkgsrc-2023Q1-base:1.1
	pkgsrc-2022Q4:1.1.0.16
	pkgsrc-2022Q4-base:1.1
	pkgsrc-2022Q3:1.1.0.14
	pkgsrc-2022Q3-base:1.1
	pkgsrc-2022Q2:1.1.0.12
	pkgsrc-2022Q2-base:1.1
	pkgsrc-2022Q1:1.1.0.10
	pkgsrc-2022Q1-base:1.1
	pkgsrc-2021Q4:1.1.0.8
	pkgsrc-2021Q4-base:1.1
	pkgsrc-2021Q3:1.1.0.6
	pkgsrc-2021Q3-base:1.1
	pkgsrc-2021Q2:1.1.0.4
	pkgsrc-2021Q2-base:1.1
	pkgsrc-2021Q1:1.1.0.2
	pkgsrc-2021Q1-base:1.1;
locks; strict;
comment	@# @;


1.1
date	2021.02.10.13.00.05;	author cjep;	state Exp;
branches;
next	;
commitid	pZLDMlMQEZbYfaHC;


desc
@@


1.1
log
@PR#22362. Add Darwin support.
Also avoid overlapping strcpy.

Should be noted that this package needs an upgrade. There is one being
developed in pkgsrc-wip.
@
text
@# $NetBSD
# From NetBSD: tw.conf.netbsd,v 1.3 2001/11/05 14:29:23 hubertf Exp 
#
# tripwire.config
# Generic version for Darwin
# YOU SHOULD EDIT THIS TO MEET YOUR REQUIREMENTS!
#
# This file contains a list of files and directories that System 
# Preener will scan.  Information collected from these files will be 
# stored in the tripwire.database file.
#
# Format: 			[!|=] entry [ignore-flags]
#
# where:	 '!' signifies the entry is to be pruned (inclusive) from
#				the list of files to be scanned.
#		 '=' signifies the entry is to be added, but if it is
#				a directory, then all its contents are pruned
#				(useful for /tmp).
#
# where:	entry is the absolute pathname of a file or a directory
#
# where ignore-flags are in the format:
#		[template][ [+|-][pinugsam12] ... ]
#
# 	- :  ignore the following atributes
#	+ :  do not ignore the following attributes
#
#	p :  permission and file mode bits 	a: access timestamp
#	i :  inode number			m: modification timestamp
#	n :  number of links (ref count)	c: inode creation timestamp
#	u :  user id of owner			1: signature 1
#	g :  group id of owner			2: signature 2
#	s :  size of file
#
#
# Ex:   The following entry will scan all the files in /etc, and report
#	any changes in mode bits, inode number, reference count, uid,
#	gid, modification and creation timestamp, and the signatures.
#	However, it will ignore any changes in the access timestamp.
#
#	/etc	+pinugsm12-a
#
# The following templates have been pre-defined to make these long ignore
# mask descriptions unecessary.
#
# Templates: 	(default)	R :  [R]ead-only (+pinugsm12-a)
#				L :  [L]og file (+pinug-sam12)
#				N :  ignore [N]othing (+pinusgsamc12)
#				E :  ignore [E]verything (-pinusgsamc12)
#
# By default, Tripwire uses the R template -- it ignores
# only the access timestamp.
#
# You can use templates with modifiers, like:
#	Ex:  /etc/lp	E+ug
#
#	Example configuration file:
#		/etc		R	# all system files
#		!/etc/lp	R	# ...but not those logs
#		=/tmp		N	# just the directory, not its files
#
# Note the difference between pruning (via "!") and ignoring everything
# (via "E" template):  Ignoring everything in a directory still monitors
# for added and deleted files.  Pruning a directory will prevent Tripwire
# from even looking in the specified directory.
#
#
# Tripwire running slowly?  Modify your tripwire.config entries to
# ignore the (signature 2) attribute when this computationally-exorbitant 
# protection is not needed.  (See README and design document for further
# details.)
#

#  First, root's "home"
=/				L
/var/root			R-2
!/var/root/Library			# noisy

# /bin and exceptions
/bin		R-2

# /dev
/dev	 	L

!/dev/fd        R	# Grumbles on Darwin

# /etc and exceptions
/etc			R-2
/etc/master.passwd	L
/etc/motd		L
/etc/passwd		L
/etc/uucp		L

# Home directories
=/Users

# /sbin
/sbin			R-2

# /usr/bin
/usr/bin		R-2

/usr/lib		R-2

/usr/libexec		R-2

/usr/local/bin		R-2

/usr/local/etc		L

/usr/sbin		R-2

# packages...
=@@localbase@@
=@@x11base@@

###########################################
@