RE: Problem with portaudit's database

From: Michael Scheidell (scheidell_at_secnap.net)
Date: 09/07/05

  • Next message: Dmitry Pryanishnikov: "Re: Problem with portaudit's database"
    Date: Wed, 7 Sep 2005 07:56:49 -0400
    To: "Simon L. Nielsen" <simon@FreeBSD.org>, "Dmitry Pryanishnikov" <dmitry@atlantis.dp.ua>
    
    

    > -----Original Message-----
    > From: owner-freebsd-security@freebsd.org
    > [mailto:owner-freebsd-security@freebsd.org] On Behalf Of
    > Simon L. Nielsen
    > Sent: Wednesday, September 07, 2005 7:35 AM
    > To: Dmitry Pryanishnikov
    > Cc: freebsd-security@freebsd.org
    > Subject: Re: Problem with portaudit's database
    > On 2005.09.07 10:35:21 +0300, Dmitry Pryanishnikov wrote:
    >
    > > Yesterday portaudit notified me about squid's vulnerability, but
    > > today it didn't (despite I haven't upgraded squid). This
    > has attracted
    > > my attention, so I've compared yesterday's and today's
    > auditfile.tbz:
    > >
    > > -r--r--r-- 1 root wheel 29875 Sep 6 15:40 auditfile.tbz
    > >
    > > vs.
    > >
    > > -r--r--r-- 1 root wheel 5685 Sep 7 10:11 auditfile.tbz

    I had a similar problem (which was fixed with portaudit -F) so, I assume
    that for a short time, the audit db was corrupted.
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"


  • Next message: Dmitry Pryanishnikov: "Re: Problem with portaudit's database"