Changed files (permissions) (UNIX)

Module: File Watch

This check reports permissions changes that affect files and directories within the directory trees that are watched.

The following table lists the error messages for the check.

Table: Error messages for Changed files (permissions)

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_DIFF_PERM

Category: Policy Compliance

UNIX (45734)

Title: Directory or file permissions changed

Description:The permissions for the directory or file were changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_PERM_GREEN

Category: Policy Compliance

UNIX (45748)

Title: Directory or file permissions changed (Green level)

Description:The permissions for the directory or file were changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_PERM_YELLOW

Category: Policy Compliance

UNIX (45749)

Title: Directory or file permissions changed (Yellow level)

Description:The permissions for the directory or file were changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_PERM_RED

Category: Policy Compliance

UNIX (45750)

Title: Directory or file permissions changed (Red level)

Description:The permissions for the directory or file were changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_EXP_PERM

Category: Policy Compliance

UNIX (45735)

Title: Directory or file permissions expanded

Description:The permissions for the directory or file were expanded after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_EXP_PERM_GREEN

Category: Policy Compliance

UNIX (45760)

Title: Directory or file permissions expanded (Green level)

Description:The permissions for the directory or file were expanded after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_EXP_PERM_YELLOW

Category: Policy Compliance

UNIX (45761)

Title: Directory or file permissions expanded (Yellow level)

Description:The permissions for the directory or file were expanded after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_EXP_PERM_RED

Category: Policy Compliance

UNIX (45762)

Title: Directory or file permissions expanded (Red level)

Description:The permissions for the directory or file were expanded after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore the previous permissions.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]