RE: Problem with portaudit's database
From: Michael Scheidell (scheidell_at_secnap.net)
Date: Wed, 7 Sep 2005 07:56:49 -0400 To: "Simon L. Nielsen" <simon@FreeBSD.org>, "Dmitry Pryanishnikov" <email@example.com>
> -----Original Message-----
> From: firstname.lastname@example.org
> [mailto:email@example.com] On Behalf Of
> Simon L. Nielsen
> Sent: Wednesday, September 07, 2005 7:35 AM
> To: Dmitry Pryanishnikov
> Cc: firstname.lastname@example.org
> Subject: Re: Problem with portaudit's database
> On 2005.09.07 10:35:21 +0300, Dmitry Pryanishnikov wrote:
> > Yesterday portaudit notified me about squid's vulnerability, but
> > today it didn't (despite I haven't upgraded squid). This
> has attracted
> > my attention, so I've compared yesterday's and today's
> > -r--r--r-- 1 root wheel 29875 Sep 6 15:40 auditfile.tbz
> > vs.
> > -r--r--r-- 1 root wheel 5685 Sep 7 10:11 auditfile.tbz
I had a similar problem (which was fixed with portaudit -F) so, I assume
that for a short time, the audit db was corrupted.
email@example.com mailing list
To unsubscribe, send any mail to "firstname.lastname@example.org"