On Wed, Sep 28, 2011 at 6:37 AM, AlgoBoy wrote:
> I found in my /etc/passwd file that there are three "extra" users that
> cannot login but are listed.
>
> ossec
This is the ossec user. ossec-analysisd runs as this user (in a chroot
to /var/ossec (by default, you may have chosen something differe
I found in my /etc/passwd file that there are three "extra" users that
cannot login but are listed.
ossec
ossecm
ossecr
What are these for? I know they are attached to the Ossec HIDs
software but can anyone explain what these users are for? I think they
might be the reason I keep getting checksum