tripwire를 통하여 보안관리하던중 /bin/mv, /bin/ls... 등의 화
tripwire를 통하여 보안관리하던중 /bin/mv, /bin/ls... 등의 화일이 수정되었다는 메일을 받았습니다.
Modified:
"/etc/profile.d"
"/etc/profile.d/colorls.csh"
"/etc/profile.d/colorls.sh"
-------------------------------------------------------------------------------
Rule Name: OS executables and libraries (/bin)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin"
-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chgrp)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin/chgrp"
-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chmod)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin/chmod"
-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chown)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin/chown"
-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/cp)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin/cp"
.
.
.
.
어떤내용일까요? 고수님들 부탁드립니다..
댓글 달기