Security Run Output - Possible Error?

[tstorzuk]

To all,

I just got this this morning emailed to me in my security run output, and I want to check to see if it's a possible item to be worried about;

Code:

Checking for uids of 0:
root 0
 
Checking for passwordless accounts:
 
Checking login.conf permissions:
 
Checking for ports with mismatched checksums:
 
trinity.matrix kernel log messages:
+++ /tmp/security.g1uH5QN8      2013-10-15 03:01:01.000000000 -0600
 
trinity.matrix login failures:
 
trinity.matrix refused connections:
 
-- End of security output --

The line I am concerned about is the kernel log messages. I've never had anything in that line before, and wanted to make sure if it was something to look into.

Thanks for all the help you can give.

 

[tstorzuk]

Ok, this morning I got another similar line in the kernel log message line;

Code:

trinity.matrix kernel log messages:
+++ /tmp/security.bnP18ZA9      2013-10-16 03:01:00.000000000 -0600

A little bit different today, but very similar. Any idea what these messages are saying?

 

[Dusan]

No problem, don't worry. The dmesg log is full and getting truncated. The periodic script compares the today's output with yesterday's. It notices that there is difference, but it only prints out new lines and ignores deleted lines. What you see is the header of the diff output after the removed lines were filtered out.

 

[tstorzuk]

Dusan,

Thanks a lot. I was starting to get worried there for a bit.

Cheers!

 

[tstorzuk]

Umm, just curious.....is there a way to flush/clear the current dmesg log?

 

[tstorzuk]

Oh, no worries. I found out how to clear it...

Code:

sysctl kern.msgbuf_clear=1