All,
My tripwire reported this this morning.......anyone
know exactly why this would change if I haven't done a Kernel upgrade? The
only thing that I can think of that may have affected anything is I recently
shut off "portmap" because I'm not using NFS.
Rule Name: Critical devices (/proc/kcore)
Severity Level: 100 ------------------------------------------------------------------------------- Modified: "/proc/kcore" ------------------------------------------------------------------------------- TWUPD details show this......concerns
me.
Rule Name: Critical devices
(/proc/kcore)
Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /proc/kcore
Property:
Expected
Observed
------------- ----------- ----------- Object Type Regular File Regular File Device Number 2 2 File Device Number 0 0 Mode -r-------- -r-------- UID root (0) root (0) GID root (0) root (0) * Size 268423168 335532032 Thanks All,
Brett
|