tripwire를 통하여 보안관리하던중 /bin/mv, /bin/ls... 등의 화

dblover의 이미지

tripwire를 통하여 보안관리하던중 /bin/mv, /bin/ls... 등의 화일이 수정되었다는 메일을 받았습니다.

Modified:
"/etc/profile.d"
"/etc/profile.d/colorls.csh"
"/etc/profile.d/colorls.sh"

-------------------------------------------------------------------------------
Rule Name: OS executables and libraries (/bin)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/bin"

-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chgrp)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/bin/chgrp"

-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chmod)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/bin/chmod"

-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chown)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/bin/chown"

-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/cp)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/bin/cp"
.
.
.
.

어떤내용일까요? 고수님들 부탁드립니다..