On Apr 6, 2015 4:58 PM, "pmartin2b" <[email protected]> wrote: > > hello > > I installed Ossec on a debian server with very classical configuration. > since few days I received many email like this one > > > OSSEC HIDS Notification. > 2015 Apr 06 18:46:31 > > Received From: sd-32709->/var/log/syslog > Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system." > Portion of the log(s): > > Apr 6 18:46:29 sd-32709 rngd[28258]: stats: FIPS 140-2 failures: 5 > > > > --END OF NOTIFICATION > > I reinstalled Ossec but same problem > if someone can help me > thk >
Rngd is having a fips 140-2 failure. I'm guessing installing fips support was the first error. > -- > > --- > You received this message because you are subscribed to the Google Groups "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
