this is a great clue, doing as you said i have found that the xmame and Xwrapper files referenced in the messages i posted are present twice each in the suid_md5.diff file and appear on different lines in the suid_md5.today and suid_md5.yesterday, if i understand what is happenning with these three files correctly then this would cause the behaviour i described? i believe that a similar thing has happened with the other files, if i am happy that my files are okay perhaps i should delete these files (some of them) and let msec start from scratch, i've just upgraded to the latest version of msec as florin suggested so i shall wait till the morning to see what happens
cheers bascule On Monday 22 Apr 2002 10:05 pm, you wrote: > Take a look in /var/log/security which is where msec saves its files. The > *.today files have the results of today's check, the *.yesterday files have > the results of yesterday's check, and the *.diff files show the changes > from yesterday to today. Looking at and comparing these files to one > another should help you learn what's really happening. > > David -- She hated everything that predestined people, that fooled them, that made them slightly less than human. (Witches Abroad)
