Hi all, I have install ossec 1.3 on two rhel5 servers. On both servers ossec generates this alert??
OSSEC HIDS Notification.
2007 Sep 12 09:51:32
Received From: xenhost->rootcheck
Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)."
Portion of the log(s):
File '/sys/module/sbs/parameters/capacity_mode' is owned by root and has
written permissions to anyone.
What does it means???
--
CL Martinez
carlopmart {at} gmail {d0t} com
