On 03/04/2011 08:30 PM, dan (ddp) wrote:
I haven't done much research into this, but my guess would be that
this is a false positive.
/dev/shm seems to be some strange shared memory access.
lsof is claiming that those files are deleted (type = DEL).
My best guess would be that this is some kind of strange interaction
between /dev/shm, the clustering stuff, and OSSEC's checks. I'd hit up
support at redhat to see if they have any thoughts on the matter.
Many thanks Dan.
--
CL Martinez
carlopmart {at} gmail {d0t} com
