I'll admit to not being an expert here, so I may just be showing my
own ignorance.
/etc/changelist lists files to be monitored for changes. I'm not aware
of any tools which will revert changes automaticaly based on this list.
Certainly, I have never seen this behaviour - when a listed file is
modified, the diff is mailed to root, but the file is *not* reverted.
I believe you'll have to look further to find what is happening - it's
not the stock security script.
paulm
On 22/10/2009, at 11:24 AM, Elliott Barrere wrote:
What is the preferred procedure for changing files that are watched by
the security script (i.e. present in /etc/changelist)?
I have a few boxes cloned from one and I would like to change SSH keys
and other sensitive files but the script seems to be changing them
back. Is there documentation somewhere for what the script currently
does?
Thanks,
-elliott-