Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Nov 2011 12:04:52 +0300
From:      Odhiambo Washington <odhiambo@gmail.com>
To:        Ross <basarevych@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Do you run OSSEC on 9.0?
Message-ID:  <CAAdA2WMXBZdCkxas=yT=YSYu4P6HE7sUKOvZRvHdhCx9m7GnTQ@mail.gmail.com>
In-Reply-To: <CANmv3=yDOqZQ0E+9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com>
References:  <CANmv3=yDOqZQ0E+9EE1i3a5vXBs7D7tvQx7Ag27Rc1Ba9ZJGbQ@mail.gmail.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
--0016e658614ec1602804b27756d9
Content-Type: text/plain; charset=UTF-8

Getting the same too, since I upgraded my 8.2 -> 9.0-PRE.

Would be interested in the answers too.


On Thu, Nov 24, 2011 at 10:32, Ross <basarevych@gmail.com> wrote:

> I am getting emails about hidden files in /dev. Before that (on 8.2)
> everything was OK. What should I do?
>
>
> OSSEC HIDS Notification.
> 2011 Nov 24 08:17:25
>
> Received From: coffin->rootcheck
> Rule: 510 fired (level 7) -> "Host-based anomaly detection event
> (rootcheck)."
> Portion of the log(s):
>
> Files hidden inside directory '/dev'. Link count does not match number
> of files (9,27).
>
>
>
>  --END OF NOTIFICATION
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "
> freebsd-questions-unsubscribe@freebsd.org"
>



-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
I can't hear you -- I'm using the scrambler.
Please consider the environment before printing this email.

--0016e658614ec1602804b27756d9--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?CAAdA2WMXBZdCkxas=yT=YSYu4P6HE7sUKOvZRvHdhCx9m7GnTQ>