I am new to Linux, but am currently using Redhat 9.0 to set up a small webserver. For security, I was advised to set up tripwire, but have run into problems:

As root, I type /etc/tripwire/twinstall.sh
I create the site and local passfiles
I type tripwire --init
I get the list of "errors" indicating filenames that do not exist
I go into /etc/tripwire/tw.pol.txt and put # in front of each of those filenames listed as not existing.

But when I go back to tripwire --update-policy /etc/tripwire/twpol.txt after a long wait I get a message listing errors and that the database was not updated.

Can anyone tell me what I am doing wrong?