Changed files (signature) (UNIX)

Module: File Watch

This check performs signature checks and compares current signatures against snapshot values to detect changed files in the directory trees being watched.

The following table lists the error messages for the check.

Table: Error messages for Changed files (signature)

Message String ID and Category	Platform and Message Numeric ID	Message Title and Description	Additional Information
String ID: ESMM_MODIFIED Category: Policy Compliance	UNIX (45736)	Title: File modified Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.	Severity: yellow-1 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_MODIFIED_GREEN Category: Policy Compliance	UNIX (45757)	Title: File modified (Green level) Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.	Severity: green-0 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_MODIFIED_YELLOW Category: Policy Compliance	UNIX (45758)	Title: File modified (Yellow level) Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.	Severity: yellow-2 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]
String ID: ESMM_MODIFIED_RED Category: Policy Compliance	UNIX (45759)	Title: File modified (Red level) Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.	Severity: red-4 Correctable: false Snapshot Updatable: true Template Updatable: false Information Field Format: [%s]

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_MODIFIED

Category: Policy Compliance

UNIX (45736)

Title: File modified

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_GREEN

Category: Policy Compliance

UNIX (45757)

Title: File modified (Green level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_YELLOW

Category: Policy Compliance

UNIX (45758)

Title: File modified (Yellow level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_MODIFIED_RED

Category: Policy Compliance

UNIX (45759)

Title: File modified (Red level)

Description:The file changed after the last snapshot update. If the changes are authorized, update the snapshot. If they are not authorized, restore to the file from a backup.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]