On 08/25/2012 10:27 PM, carlopmart wrote:
On 08/25/2012 10:18 PM, Michael Starks wrote:
On 08/25/2012 02:17 PM, Ryan Schulze wrote:
forward slash, backslash problem ?
'C:\Windows/System32/telnet.exe' != 'C:\Windows\System32\telnet.exe'
'C:\Windows/System32/telnet.exe is correct. I was thinking perhaps it is
a problem with the MAC label not allowing ossec access to the file.
MAC label?? Uhmm, maybe you are right ...What permissions do I need to
setup in this binary??
At this moment SYSTEM, Administrators and Users use Read & Execute ...
Only TrustedInstaller have full control ...
More info: telnet.exe has same security permissions as regedt32.exe or
runas.exe binaries, and these last ones are checked by ossec agent
withou errors or warnings ...
--
CL Martinez
carlopmart {at} gmail {d0t} com
