On 11/23/2010 08:30 AM, [email protected] wrote:
Hi
I received a a request for a particular type of monitoring. Which is can
OSSEC monitor
World writable files in a given directory. I know it can monitor changes
in file permission
Or content. But this request is specific, if a new file appears in the
dir and it is ww it
Should be flaged .
Is there a rule for this or can one be made
Sure:
http://www.immutablesecurity.com/index.php/2009/10/25/week-of-ossec-day-1-detecting-world-writable-files/
--
Michael Starks
[I] Immutable Security
http://www.immutablesecurity.com
