msec message/log

[tf1]

Hi

I usually get a pop up message from msec saying it has done a security check. Today i noticed a different pop up, to quick to catch properly but mentioned /var/log.

 

I've looked at /var/log/msec.log and found these entries.

 

2009-06-01 12:08:42 2009-06-01 10:50:26,505 WARNING: Enforcing permissions on /var/log/security/suid_root.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,506 WARNING: Enforcing permissions on /var/log/security/writable.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,506 WARNING: Enforcing permissions on /var/log/security/sgid.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,506 WARNING: Enforcing permissions on /var/log/security/open_port.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,507 WARNING: Enforcing permissions on /var/log/security/unowned_user.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,507 WARNING: Enforcing permissions on /var/log/security/suid_md5.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,507 WARNING: Enforcing permissions on /var/log/security/unowned_group.today to 640

2009-06-01 12:08:42 2009-06-01 10:50:26,707 WARNING: Wrong permissions of /etc/rc.d/init.d/acpid: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,707 WARNING: Wrong permissions of /etc/rc.d/init.d/ip6tables: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,708 WARNING: Wrong permissions of /etc/rc.d/init.d/ntpd: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,708 WARNING: Wrong permissions of /dev: should be 755

2009-06-01 12:08:42 2009-06-01 10:50:26,708 WARNING: Wrong group of /var/log/btmp.1.gz: should be adm

2009-06-01 12:08:42 2009-06-01 10:50:26,709 WARNING: Wrong permissions of /var/log/btmp.1.gz: should be 640

2009-06-01 12:08:42 2009-06-01 10:50:26,709 WARNING: Wrong permissions of /etc/rc.d/init.d/xfs: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,709 WARNING: Wrong permissions of /etc/rc.d/init.d/iptables: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,709 WARNING: Wrong permissions of /etc/rc.d/init.d/mandi: should be 744

2009-06-01 12:08:42 2009-06-01 10:50:26,710 WARNING: Wrong permissions of /var/log/ConsoleKit/history: should be 640

2009-06-01 12:08:42 2009-06-01 10:50:26,710 WARNING: Wrong permissions of /etc/rc.d/init.d/shorewall: should be 744

2009-06-01 12:08:42 2009-06-01 11:01:01,620 INFO: Forbidding the X server to listen to tcp connection

2009-06-01 12:08:42 2009-06-01 11:01:01,638 INFO: Setting minimum password length 4

2009-06-01 12:08:42 2009-06-01 11:01:01,654 INFO: No changes in system files

2009-06-01 12:08:42 2009-06-01 12:01:01,226 INFO: Forbidding the X server to listen to tcp connection

2009-06-01 12:08:42 2009-06-01 12:01:01,265 INFO: Setting minimum password length 4

2009-06-01 12:08:42 2009-06-01 12:01:01,278 INFO: No changes in system files

 

Can't find anything similar in a search, any ideas what this means? is there a problem and if there is, what do i do?

 

Thanks

[ianw1974]

msec is resetting security permissions on files. This is normal. If you don't want this, you can reduce the security level on your system so that it doesn't do it. You probably have it to highest level which is why it's doing it.

[tf1]

msec is resetting security permissions on files. This is normal. If you don't want this, you can reduce the security level on your system so that it doesn't do it. You probably have it to highest level which is why it's doing it.

 

Thanks Ian, that's fine as long as i know what's going on. Just getting a bit paranoid these days. "highest level" sounds good to me.