tripwire를 통하여 보안관리하던중 /bin/mv, /bin/ls... 등의 화일이 수정되었다는 메일을 받았습니다.
Modified:
"/etc/profile.d"
"/etc/profile.d/colorls.csh"
"/etc/profile.d/colorls.sh"
-------------------------------------------------------------------------------
Rule Name: OS executables and libraries (/bin)
Severity Level: 100
-------------------------------------------------------------------------------
Modified:
"/bin"
-------------------------------------------------------------------------------
Rule Name: File System and Disk Administraton Programs (/bin/chgrp)