/usr/lib/tiger/doc/config.html is in tiger 1:3.2.3-10.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 | <HR><PRE>
</PRE><HR>
<CENTER><H2> Documents for config</H2></CENTER>
<A NAME="con001c"><P><B>Code [con001c]</B><P>
The configuration file listed was not read because it was
a directory.
<PRE>
</PRE><HR>
<A NAME="con002c"><P><B>Code [con002c]</B><P>
The configuration file listed was not read because it was
not owned by `root'. This is to prevent someone from
modifying the configuration file.
<PRE>
</PRE><HR>
<A NAME="con003c"><P><B>Code [con003c]</B><P>
The configuration file listed was not read because it was
writable by non-root users. This is to prevent someone from
modifying the configuration file.
<PRE>
</PRE><HR>
<A NAME="con004c"><P><B>Code [con004c]</B><P>
Informational message describing which configuration files are
being used during the checks.
<PRE>
</PRE><HR>
<A NAME="con005c"><P><B>Code [con005c]</B><P>
Configuration files, specific to the type of system that `tiger' is being
run on, do not exist. It may not be possible to perform all of the checks
due to the lack of certain files. Some checks that are performed may
also generate incorrect or incomplete information.
<PRE>
</PRE><HR>
<A NAME="con006e"><P><B>Code [con006e]</B><P>
The indicated option was not recognized. The valid options are:
<P>
-B tiger_home Specify tiger home directory
<P>
-d directory Specify directory to create security logs in
<P>
-w directory Specify directory to use for scratch files
<P>
-e Insert explanations into output
<P>
-E Generate separate explanation report
<P>
-S Perform partial checks of disk-less client
<P>
configuration files on server.
<PRE>
</PRE><HR>
<A NAME="con007c"><P><B>Code [con007c]</B><P>
Generic configuration files for this system do not exist. The
checking system will continue on, attempting to locate items it
needs, and using default configuration files. Many checks will
not be performed, and many that are attempted may function
incorrectly, generating incorrect output.
<PRE>
</PRE><HR>
<A NAME="con008e"><P><B>Code [con008e]</B><P>
Generic configuration files for this system do not exist. The
checking system attempted to continue on, but could not locate
the default configuration files either. This is an installation
problem. It may be necessary to indicate the location of the
tiger files using the '-B' option.
<PRE>
</PRE><HR>
<A NAME="con009e"><P><B>Code [con009e]</B><P>
There doesn't exist a configuration variable or it is not properly
defined. Since the variable is needed for the module to run, it
will probably exit. This is a configuration problem. It is
necessary to add the variable to the tigerrc configuration file.
<PRE>
</PRE><HR>
<A NAME="con010c"><P><B>Code [con010c]</B><P>
The filesystem is not recognised by Tiger as a valid filesystem
for this operating system and will not be analysed. If this is a local
filesystem then the configuration script for this operating system
needs to be modified. You should report this as a bug in the software.
<P>
You can use the following tigerrc variables to adjust this message
or adapt it to your system locally:
<P>
- Tiger_FSScan_Local: if set, filesystems defined in it will be considered
local and will always be analysed.
- Tiger_FSScan_NonLocal: ff set, filesystems defined in it will be considered
non-local and will not be analysed.
- Tiger_FSScan_WarnUnknown : If set to 'N' this message will not be presented
(this prevents it from being emailed when some of the Tiger scripts are run
through cron)
<PRE>
</PRE><HR>
<A NAME="init001e"><P><B>Code [init001e]</B><P>
The indicated variable, which should specifies the pathname to a command,
does not have a value. This message should not appear on platforms
for which support is listed. If it does appear, then for the missing
commands, if you know the name of the command, then simply place it
into the environment and rerun the checking system.
<P>
setenv AWK /usr/bin/awk
<P>
./tiger
<P>
Or alternately, create a 'site' configuration file and insert an
assignment statement in there of the form:
<P>
AWK=/usr/bin/awk
<P>
<PRE>
</PRE><HR>
<A NAME="init002e"><P><B>Code [init002e]</B><P>
The required configuration script was not found in the listed directory.
The programs can not run without this script. The '-B' switch can
be used to specify the directory containing the configuration script.
<P>
./tiger -B path_to_tiger_home
<P>
<PRE>
</PRE><HR>
<A NAME="init003c"><P><B>Code [init003c]</B><P>
Output when run in `self-test' mode indicating that everything appears
to be OK as far as having all commands and files.
<PRE>
</PRE><HR>
<A NAME="init004e"><P><B>Code [init004e]</B><P>
The indicated command does not exist or is not executable. This
indicates a configuration error.
<PRE>
</PRE><HR>
<A NAME="init005e"><P><B>Code [init005e]</B><P>
The indicated variable, which should contain the pathname to an
input file or work directory does not have a value. This indicates
that either full support is not available for this platform, that
the system tried to find a valid file to set a value for the variable
but was not able to
or that there is a configuration error.
<PRE>
</PRE><HR>
<A NAME="init006e"><P><B>Code [init006e]</B><P>
An input file required for performing a test is not available. This
indicates that there is a configuration error.
<PRE>
</PRE><HR>
<A NAME="init007e"><P><B>Code [init007e]</B><P>
A required variable does not have a value. This indicates either
incomplete support this platform or a configuration error.
<PRE>
</PRE><HR>
<A NAME="init008e"><P><B>Code [init008e]</B><P>
An attempt was made to run one of the support scripts directly.
These scripts can only be invoked by the top level scripts.
<PRE>
</PRE><HR>
<A NAME="init009e"><P><B>Code [init009e]</B><P>
The script wanted to use a temporary script which already exists, this
might mean somebody created it to make use of a (fortunately non-existent)
race condition. The script will not proceed further since it will not
use a file which it did not create itself.
<PRE>
</PRE><HR>
<A NAME="util001e"><P><B>Code [util001e]</B><P>
The attempt to compile the signature checking program (SNEFRU) failed.
This will prevent the tests of the integrity of system binaries from
being performed.
<PRE>
</PRE><HR>
<A NAME="util002e"><P><B>Code [util002e]</B><P>
The attempt to compile the program for resolving symbolic links failed.
This will prevent the checks of symbolic links from being performed.
<PRE>
</PRE><HR>
<A NAME="post001e"><P><B>Code [post001e]</B><P>
The listed file was not deleted because it was not in the scratch
directory. This indicates an internal error.
<PRE>
</PRE><HR>
<A NAME="read001i"><P><B>Code [read001i]</B><P>
The indicated file exists, but can not be read. This usually happens
if you do not run the scripts from an account with super-user privileges.
<PRE>
</PRE><HR>
<A NAME="run001e"><P><B>Code [run001e]</B><P>
A needed file cannot be read, probably due to insufficient privileges.
Make sure that Tiger is run by the superuser (root) account.
<PRE>
</PRE><HR>
<A NAME="run002e"><P><B>Code [run002e]</B><P>
A needed command cannot be executed, probably due to insufficient privileges.
Make sure that Tiger is run by the superuser (root) account.
|