eXistenZ is an open source, GPL remote management tool for TripWire version 2.3 It is in no way affiliated or sponsored by TripWire. It is not affiliated with eXistenZ the movie (which, by the way, you should go and see.)

The story of eXistenZ
The first incarnation of eXistenZ was a simple perl script which ran on the remote server, removing non-existant (hence the name) files from TripWire's default policy. Along with it came soilentgreen (added new files to the policy based on recently installed RPMs) and dialm (adds email addresses to the policy's rules). This software was never released to the public, adn was used only in house. It was extremely buggy (even more than now!) and lacked any real time-saving features. Since then soilentgreen has been dropped from the distribution, because it wasn't to helpful. dialm is still included because you'll need it probably one time for every new server.

Since then the following has changed:
eXistenZ is now a fully featured remote administration tool.
Passwords are stored locally in a gpg encrypted file and passed to remote tripwire and twadmin binaries over a secure ssh session.

Current options available remotely include:
Database initialization of one or multiple hosts
Database updates of one or more hosts
md5sum checks of remote database, policy, config, site.key, local.key
Editing of a server's policy file
Editing of a server's config file
Pruning non-existent files from remote policies
inserting email addresses into remote policies
Remote integrity check
View most recently created report
Quick summary of most recent preort (contains total files scanned and total violations)

Requirements:
perl
bash (sh will probably work too, edit the shebang)
gpg
ssh
sshd configured to allow root to login with a dsa key
a dsa key or two

email Cory with questions, suggestions, bugs, etc.

Oh yeah... md5sum checks of all the files...

b72f530f7dd74a657e22f7a15be68e5f eXistenZ-1.3a.tgz
2f040955550ac8f1c8f9363697be478a eXistenZ
346ad1757cef3291050152033810ffa6 dialm
e5a29f7b19cd69ab631bf1a528087635 slash.tgz
1f9841962ac867e1da72fc6cbfdf5e1d README

and the file itself.

On a last note, this product does not come with any sort of warrantee, expressed or implied. It's just a few scripts that I whipped up to make my job easier. Please be a smart System administrator and verify the md5sums of these programs before using them. Then, look through the code and make sure you understand what's going on. Remember, eXistenZ requires passwordless ssh access AS ROOT to all of your servers, via ssh-agent and dsa keys. It's going to do things on your production machines. Make sure you know what's in the code. if you see a line like ssh root@$host "rm -rf /" in there, someone's being funny with you and can cause serious damage. If you don't have a basic understanding of how tripwire works and think this is going to dumb down the learning curve you're probably right, but you should have a fairly good understanding (at least have installed it a couple of times and updated the database, edited the policy file, etc) of TripWire, and of bash and perl. And of course, be careful, you don't even know me.

SourceForge.net Logo