OSSEC HIDS Notification på SUSE 10.2
SUSE 10.2Jeg får denne besked en gang per døgn fra OSSEC HIDS Notification.
Nogen som kan beskrive før mig om hvad som menes.
OSSEC HIDS Notification.
2007 May 09 16:01:51
Received From: damolof->/var/log/messages
Rule: 40111 fired (level 10) -> "Multiple authentication failures." Portion of the log(s):
May 9 16:01:50 damolof su: pam_limits(su:session): invalid line 'hard nproc 8192' - skipped
May 9 16:01:50 damolof su: pam_limits(su:session): invalid line 'soft nproc 8192' - skipped
May 9 16:01:50 damolof su: pam_limits(su:session): invalid line 'hard nofile 8192' - skipped
May 9 16:01:50 damolof su: pam_limits(su:session): invalid line 'soft nofile 8192' - skipped
May 9 16:00:15 damolof su: pam_limits(su:session): invalid line 'hard nproc 8192' - skipped
May 9 16:00:15 damolof su: pam_limits(su:session): invalid line 'soft nproc 8192' - skipped
May 9 16:00:15 damolof su: pam_limits(su:session): invalid line 'hard nofile 8192' - skipped
May 9 16:00:15 damolof su: pam_limits(su:session): invalid line 'soft nofile 8192' - skipped
May 9 16:00:03 damolof su: pam_limits(su:session): invalid line 'hard nproc 8192' - skipped
May 9 16:00:03 damolof su: pam_limits(su:session): invalid line 'soft nproc 8192' - skipped
--END OF NOTIFICATION
I øvrigt kør mit SUSE fortræffeligt