Date: Thu, 24 Nov 2011 09:32:41 +0200 From: Ross <basarevych@gmail.com> To: freebsd-questions@freebsd.org Subject: Do you run OSSEC on 9.0? Message-ID: <CANmv3=yDOqZQ0E%2B9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
I am getting emails about hidden files in /dev. Before that (on 8.2) everything was OK. What should I do? OSSEC HIDS Notification. 2011 Nov 24 08:17:25 Received From: coffin->rootcheck Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)." Portion of the log(s): Files hidden inside directory '/dev'. Link count does not match number of files (9,27). --END OF NOTIFICATION
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CANmv3=yDOqZQ0E%2B9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ>