Changed files (signature) (UNIX)

Module: File Watch

This check performs signature checks and compares current signatures against snapshot values to detect changed files in the directory trees being watched.

The following table lists the error messages for the check.

Table: Error messages for Changed files (signature)

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_MODIFIED

Category: Policy Compliance

UNIX (45736)

Title: File modified

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_GREEN

Category: Policy Compliance

UNIX (45757)

Title: File modified (Green level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_YELLOW

Category: Policy Compliance

UNIX (45758)

Title: File modified (Yellow level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_RED

Category: Policy Compliance

UNIX (45759)

Title: File modified (Red level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

[an error occurred while processing this directive]