At first glance, it looks perfectly normal. You just
seemed to have installed some sort intruder monitor/ids and
you'll see things like this for a while until you establish
a good working baseline.
--jordan
On 29 Mar 2003, Cau de Alencar wrote:
> The syslog entries below means ...
> what?
>
>
> -- transcript --
>
> Mar 29 13:06:20 int-mon anacron[1708]: Updated timestamp for job
> `cron.daily' to 2003-03-29
> Mar 29 13:09:12 int-mon :
> Mar 29 13:09:12 int-mon : Security Warning: Change in Suid Root files
> found :
> Mar 29 13:09:12 int-mon : - Added suid root files :
> /usr/X11R6/bin/Xwrapper
> Mar 29 13:09:12 int-mon : - Removed suid root files :
> /usr/X11R6/bin/Xwrapper
> Mar 29 13:09:12 int-mon :
> Mar 29 13:09:12 int-mon : Security Warning: Change in World Writeable
> Files found :
> Mar 29 13:09:12 int-mon : - Added writables files : /tmp/.font-unix
> Mar 29 13:09:12 int-mon : - Added writables files : /tmp/.font-unix/fs-1
> Mar 29 13:09:12 int-mon : - Added writables files :
> /tmp/.ICE-unix/dcop1548-1048953742
> Mar 29 13:09:12 int-mon : - Added writables files :
> /tmp/medusa-idled-service
> Mar 29 13:09:12 int-mon : - Removed writables files :
> /tmp/.ICE-unix/dcop1804-1048690358
> Mar 29 13:09:12 int-mon : - Removed writables files : /tmp/.font-unix
> Mar 29 13:09:12 int-mon : - Removed writables files :
> /tmp/.font-unix/fs-1
> Mar 29 13:09:13 int-mon : - Removed writables files :
> /tmp/medusa-idled-service
> Mar 29 13:09:13 int-mon :
> --
>
> TIA
>
> -- Cau
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
