URL includes the following remarks: I have a filesystem with a handful of changes and a handful of errors (missing files that were specifically listed by the policy), and the "-t 2" level of report detail does not give the names of the affected/changed files. The File System Errors are reported, and the summary section reports how many files have been modified/added. The "-t 1" and "-t 3" levels correctly report the affected filenames, and for "-t 3", the specific reason or reasons for reporting the file. 2.4.3.2 works as expected. Additional remark: Same behavior appears on a system that does not have missing files specifically listed by the tripwire policy. The failure to report affected (changed, added, removed) file names only happens when the level of report detail is "-t 2" and on the STDOUT material produced with "tripwire --check"
Created attachment 465340 [details] Tripwire Report File (.twr) that can be used to demonstrate The command ... twprint --print-report -t 2 -r involute-20170226-031045.twr ... does not show the two affected files. "-t 1" does: Note: Report is not encrypted. Modified: "/etc/crontab" Modified: "/usr/local/sbin/backup-usb" The same report file can be processed by the twprint of tripwire-2.4.3.2 to see the difference. Note that `twprint --print-report -t 2` and `tripwire --check` have similar format, listing counts, then affected (add, change, remove) filenames.
Upstream Brian Cox has fixed this in what will be tripwire-2.4.3.4 Code changes fixing this bug appear in src/tw/textreportviewer.cpp
Thanks for the report. Bumped to 2.4.3.4. https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=674dbebefab89805219143a6e093a453898824ad
