Re: [Prelude Hybrid IDS] #266: LML Ruleset to ignore cron jobs
"Sebastien Tricaud" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.devel |
|---|---|
| Message-ID | <[email protected]> |
On 10/25/07, Paul Robert Marino <[email protected]> wrote: > I've seen this the problem is in your pam configuration. > Take a look at your /etc/pam.d/crond file there is an option you can add > to stop it. The matter is not stopping having the log or running crons, which is something you are interested when you have a problem, but not to have alerts of it, since it is useless for intrusion detection. _______________________________________________ Prelude-devel site list [email protected] http://www.prelude-ids.org/mailman/listinfo/prelude-devel