Re: [ossec-list] Check sum integrity changed again

2011-09-28 Thread dan (ddp)
On Wed, Sep 28, 2011 at 6:37 AM, AlgoBoy wrote: > I found in my /etc/passwd file that there are three "extra" users that > cannot login but are listed. > > ossec This is the ossec user. ossec-analysisd runs as this user (in a chroot to /var/ossec (by default, you may have chosen something differe

[ossec-list] Check sum integrity changed again

2011-09-28 Thread AlgoBoy
I found in my /etc/passwd file that there are three "extra" users that cannot login but are listed. ossec ossecm ossecr What are these for? I know they are attached to the Ossec HIDs software but can anyone explain what these users are for? I think they might be the reason I keep getting checksum