[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ossec-list] What does it means this alert??
- To: ossec-list@xxxxxxxxxxxxxxxx
- Subject: [ossec-list] What does it means this alert??
- From: carlopmart <carlopmart@xxxxxxxxx>
- Date: Wed, 12 Sep 2007 09:56:32 +0200
- Authentication-results: mx.google.com; spf=pass (google.com: domain of carlopmart@xxxxxxxxx designates 66.249.92.175 as permitted sender) smtp.mail=carlopmart@xxxxxxxxx; dkim=pass (test mode) header.i=@xxxxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; bh=PlF1OmwqNosU//EoZKv3J7I3UMLoBJ98SXawMD5ulLo=; b=eaoW/gc5+Ki2Di6jqQGs5fV9glmE0FXErp6x94uX6J7urVsphkQmk1F6o+UnCBC1lor+P/+kwjiZBfuobPemvaHWEDJb5Y7JU9zOJcgmEC9gDNA9NFeoUigbCKFJ6hnN/DFtHVqcRzNX5TRy3yo6ajFAk/fRN9KbAiYOkYenQms=
Hi all,
I have install ossec 1.3 on two rhel5 servers. On both servers ossec
generates this alert??
OSSEC HIDS Notification.
2007 Sep 12 09:51:32
Received From: xenhost->rootcheck
Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)."
Portion of the log(s):
File '/sys/module/sbs/parameters/capacity_mode' is owned by root and has written permissions to anyone.
What does it means???
--
CL Martinez
carlopmart {at} gmail {d0t} com
OSSEC home |
Main Index |
Thread Index
OSSEC project: www.ossec.net.
Mailling list information: http://www.ossec.net/en/mailing_lists.html.