Probably your /root directory had a file within it created or removed... Try 'ls -Altr /root' and look at the last couple of lines.
tw
On 01/23/2002 10:17 +0100, Daniel Chojecki wrote:
>> Dear Subscribers !
>>
>> This is what I get from tripwire report.
>> And to me it is kinda strange.
>>
>>
>> -------------------------------------------------------------------------------
>> Rule Name: Root config files (/root)
>> Severity Level: 100
>> -------------------------------------------------------------------------------
>> ----------------------------------------
>> Modified Objects: 1
>> ----------------------------------------
>>
>> Modified object name: /root
>>
>> Property: Expected Observed
>> ------------- ----------- -----------
>> Object Type Directory Directory
>> Device Number 2055 2055
>> File Device Number 0 0
>> Inode Number 79844 79844
>> Mode drwxr-x--- drwxr-x---
>> Num Links 12 12
>> UID root (0) root (0)
>> GID root (0) root (0)
>> Size 4096 4096
>> * Modify Time Mon Jan 14 22:04:10 2002 Mon Jan 21 15:02:26
>> 2002
>> * Change Time Mon Jan 14 22:04:10 2002 Mon Jan 21 15:02:26
>> 2002
>> Blocks 8 8
>>
>> What do You think ?
>>
>> --
>> greetz
>> Daniel Chojecki
>> ^EOF
End of included message
--
[EMAIL PROTECTED]
msg03170/pgp00000.pgp
Description: PGP signature
