Page 1 of 1

warning when updating ossec-hids

Posted: Tue Jan 22, 2013 8:50 am
by mist_firefly
Just updated ossec-hids and got the following warning. What can I do about it?

Running Transaction
Updating : ossec-hids 1/4
Updating : ossec-hids-server 2/4
Shutting down ossec-hids: [ OK ]
Starting ossec-hids: [ OK ]
warning: /var/ossec/etc/shared/rootkit_trojans.txt created as /var/ossec/etc/shared/rootkit_trojans.txt.rpmnew
Cleanup : ossec-hids 3/4
Cleanup : ossec-hids-server 4/4

Updated:
ossec-hids.x86_64 0:2.7-20.el5.art

Dependency Updated:
ossec-hids-server.x86_64 0:2.7-20.el5.art

Complete!

Re: warning when updating ossec-hids

Posted: Tue Jan 22, 2013 1:38 pm
by Imaging
Please see:

http://www.redhat.com/archives/rhl-list ... 04713.html

It gives a good overview of rpmnew and rpmsave files and how you might want to handle them.

Hope this helps.

Re: warning when updating ossec-hids

Posted: Wed Jan 23, 2013 5:08 am
by mist_firefly
Thanks, I thought it would be something like that.

Now if I choose to update or change things on the .txt showed with the new one would this affect hosting or how the server works?
How important is this ossec-hids and rootkit_trojans.txt?