I have been using tiger for nearly a year. Several months ago, a new test was added in:
/usr/lib/tiger/scripts/check_finddeleted Since then, several of my servers are flooded with alerts like this: NEW: --FAIL-- [kis011f] Server [apache] (pid 31863) is using deleted files Yes, I know what it means; but, of the thousands that I have received, I have not found one that warranted the alert. No, I do *not* want to turn OFF this check; but, I need to find some way to manage the output of this check. I have searched the archives of debian-user and debian-security, and I have googled; but, I have not found a solution to this dilemma. What do you think? -- Best Regards, mds mds resource 877.596.8237 - Dare to fix things before they break . . . - Our capacity for understanding is inversely proportional to how much we think we know. The more I know, the more I know I don't know . . . --
pgppJ0B37lQoC.pgp
Description: PGP signature