Changed files (ownership) (UNIX)

Module: File Watch

This check reports ownership changes that affect files and directories within the directory trees that are watched.

The following table lists the error messages for the check.

Table: Error messages for Changed files (ownership)

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_DIFF_OWN

Category: Policy Compliance

UNIX (45733)

Title: File ownership modified

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_GREEN

Category: Policy Compliance

UNIX (45745)

Title: File ownership modified (Green Level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_YELLOW

Category: Policy Compliance

UNIX (45746)

Title: File ownership modified (Yellow Level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_RED

Category: Policy Compliance

UNIX (45747)

Title: File ownership modified (Red Level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]