カテゴリー
Linux

★8★レポートのメールタイトルの見方ですとか、たとえばこんな結果【Tripwire】わたくしだって WordPress サーバの改ざん検知したい!【CentOS】

Tripwire の扱いにも大分慣れてきましたの♪日々、次の投稿のコマンドを使ってチェックしております。

さて、yum で次のパッケージをアップデートいたしました。

  • libxml2-2.6.26-2.1.21.el5_9.3.i386
  • mysql-libs-5.5.33-1.el5.remi.i386
  • mysql-server-5.5.33-1.el5.remi.i386
  • mysql-5.5.33-1.el5.remi.i386

本来であれば、ここで Tripwire のベースラインデータベースをアップデートし、他のファイルの不正な改ざんを監視しやするべきなのですけれども、あえてこのまま放っておいて、MySQL をアップデートいたしますと Tripwire のレポートにどのように改ざん検知され、そして表現されるのか、見てみたいと思います。

レポートのメールタイトルを見てみます。

  • TWReport oki2a24.com 20130803020041 V:69 S:100 A:2 R:2 C:65

全体で 69 もの違反検知(V:violations)があり、そのうち追加(A:Added)が 2 つ、削除(R:Removed)が 2 つ、変更(C:Modified)が 65 でした。とても多いですね。中身を見てみましょう。

SSH でつないで Tripwire のレポートを覗いてみます♪

Tripwire が検知したファイル一覧を見てみましょう。

ログファイルは MySQL とは無関係ですので省くとしまして、大別して次の場所が変更されています。

  • /usr/lib/
  • /usr/bin/
  • /var/lock/
  • /var/run/
  • /etc/sysconfig/
  • /etc/rc.d/init.d/

改ざん検知に引っかかるものが把握できるという以外に、パッケージをアップデートしましすとどのファイルが更新されるのかがわかって大変興味深いです。普段は yum でばかりインストールしておりますので、ソースから configure そして make すればこのようなファイルの動きもわかるのでありましょうとしみじみ思いました。

===============================================================================
Object Summary:
===============================================================================

-------------------------------------------------------------------------------
# Section: Unix File System
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Rule Name: Libraries (/usr/lib)
Severity Level: 66
-------------------------------------------------------------------------------

Modified:
"/usr/lib/libxml2.so.2"
"/usr/lib/libxml2.so.2.6.26"
"/usr/lib/mysql/INFO_BIN"
"/usr/lib/mysql/INFO_SRC"
"/usr/lib/mysql/libmysqlclient.so.18"
"/usr/lib/mysql/libmysqlclient.so.18.0.0"
"/usr/lib/mysql/mysql_config"
"/usr/lib/mysql/mysqlbug"
"/usr/lib/mysql/plugin/adt_null.so"
"/usr/lib/mysql/plugin/auth.so"
"/usr/lib/mysql/plugin/auth_socket.so"
"/usr/lib/mysql/plugin/auth_test_plugin.so"
"/usr/lib/mysql/plugin/daemon_example.ini"
"/usr/lib/mysql/plugin/libdaemon_example.so"
"/usr/lib/mysql/plugin/mypluglib.so"
"/usr/lib/mysql/plugin/qa_auth_client.so"
"/usr/lib/mysql/plugin/qa_auth_interface.so"
"/usr/lib/mysql/plugin/qa_auth_server.so"
"/usr/lib/mysql/plugin/semisync_master.so"
"/usr/lib/mysql/plugin/semisync_slave.so"

-------------------------------------------------------------------------------
Rule Name: User binaries (/usr/bin)
Severity Level: 66
-------------------------------------------------------------------------------

Modified:
"/usr/bin/innochecksum"
"/usr/bin/msql2mysql"
"/usr/bin/my_print_defaults"
"/usr/bin/myisam_ftdump"
"/usr/bin/myisamchk"
"/usr/bin/myisamlog"
"/usr/bin/myisampack"
"/usr/bin/mysql"
"/usr/bin/mysql_config"
"/usr/bin/mysql_convert_table_format"
"/usr/bin/mysql_find_rows"
"/usr/bin/mysql_fix_extensions"
"/usr/bin/mysql_install_db"
"/usr/bin/mysql_plugin"
"/usr/bin/mysql_secure_installation"
"/usr/bin/mysql_setpermission"
"/usr/bin/mysql_tzinfo_to_sql"
"/usr/bin/mysql_upgrade"
"/usr/bin/mysql_waitpid"
"/usr/bin/mysql_zap"
"/usr/bin/mysqlaccess"
"/usr/bin/mysqladmin"
"/usr/bin/mysqlbinlog"
"/usr/bin/mysqlbug"
"/usr/bin/mysqlcheck"
"/usr/bin/mysqld_multi"
"/usr/bin/mysqld_safe"
"/usr/bin/mysqldump"
"/usr/bin/mysqldumpslow"
"/usr/bin/mysqlhotcopy"
"/usr/bin/mysqlimport"
"/usr/bin/mysqlshow"
"/usr/bin/mysqlslap"
"/usr/bin/mysqltest"
"/usr/bin/perror"
"/usr/bin/replace"
"/usr/bin/resolve_stack_dump"
"/usr/bin/resolveip"
"/usr/bin/xmlcatalog"
"/usr/bin/xmllint"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/mysqld"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/run)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/run/mysqld/mysqld.pid"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/log)
Severity Level: 100
-------------------------------------------------------------------------------

Added:
"/var/log/sa/sa03"
"/var/log/sa/sar02"

Removed:
"/var/log/sa/sa25"
"/var/log/sa/sar24"

Modified:
"/var/log/rpmpkgs"

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/sysconfig)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/etc/sysconfig/mysqld"

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/rc.d/init.d)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/etc/rc.d/init.d/mysqld"

おわりに。おまけで Tripwire レポート完全版

最後に、レポートの完全版を掲載しておきます。後日 Tripwire のレポートのサンプルが見たい時や、Tripwire をご検討されているどなたかの参考になるかもしれません。

Note: Report is not encrypted.
Tripwire(R) 2.4.1 Integrity Check Report

Report generated by:          root
Report created on:            2013年08月03日 02時00分41秒
Database last updated on:     2013年08月02日 20時54分09秒

===============================================================================
Report Summary:
===============================================================================

Host name:                    oki2a24.com
Host IP address:              127.0.0.1
Host ID:                      None
Policy file used:             /etc/tripwire/tw.pol
Configuration file used:      /etc/tripwire/tw.cfg
Database file used:           /var/lib/tripwire/oki2a24.com.twd
Command line used:            /usr/sbin/tripwire --check --email-report

===============================================================================
Rule Summary:
===============================================================================

-------------------------------------------------------------------------------
  Section: Unix File System
-------------------------------------------------------------------------------

  Rule Name                       Severity Level    Added    Removed  Modified
  ---------                       --------------    -----    -------  --------
  Invariant Directories           66                0        0        0       
  Temporary directories           33                0        0        0       
  Tripwire Data Files             100               0        0        0       
* User binaries                   66                0        0        40      
  Tripwire Binaries               100               0        0        0       
* Libraries                       66                0        0        20      
  Operating System Utilities      100               0        0        0       
  File System and Disk Administraton Programs
                                  100               0        0        0       
  Kernel Administration Programs  100               0        0        0       
  Networking Programs             100               0        0        0       
  System Administration Programs  100               0        0        0       
  Hardware and Device Control Programs
                                  100               0        0        0       
  System Information Programs     100               0        0        0       
  Application Information Programs
                                  100               0        0        0       
  (/sbin/rtmon)
  Shell Related Programs          100               0        0        0       
  Critical Utility Sym-Links      100               0        0        0       
  Shell Binaries                  100               0        0        0       
  Critical system boot files      100               0        0        0       
* System boot changes             100               2        2        3       
  OS executables and libraries    100               0        0        0       
* Critical configuration files    100               0        0        2       
  Security Control                100               0        0        0       
  Login Scripts                   100               0        0        0       
  Root config files               100               0        0        0       

Total objects scanned:  12600
Total violations found:  69

===============================================================================
Object Summary:
===============================================================================

-------------------------------------------------------------------------------
# Section: Unix File System
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Rule Name: Libraries (/usr/lib)
Severity Level: 66
-------------------------------------------------------------------------------

Modified:
"/usr/lib/libxml2.so.2"
"/usr/lib/libxml2.so.2.6.26"
"/usr/lib/mysql/INFO_BIN"
"/usr/lib/mysql/INFO_SRC"
"/usr/lib/mysql/libmysqlclient.so.18"
"/usr/lib/mysql/libmysqlclient.so.18.0.0"
"/usr/lib/mysql/mysql_config"
"/usr/lib/mysql/mysqlbug"
"/usr/lib/mysql/plugin/adt_null.so"
"/usr/lib/mysql/plugin/auth.so"
"/usr/lib/mysql/plugin/auth_socket.so"
"/usr/lib/mysql/plugin/auth_test_plugin.so"
"/usr/lib/mysql/plugin/daemon_example.ini"
"/usr/lib/mysql/plugin/libdaemon_example.so"
"/usr/lib/mysql/plugin/mypluglib.so"
"/usr/lib/mysql/plugin/qa_auth_client.so"
"/usr/lib/mysql/plugin/qa_auth_interface.so"
"/usr/lib/mysql/plugin/qa_auth_server.so"
"/usr/lib/mysql/plugin/semisync_master.so"
"/usr/lib/mysql/plugin/semisync_slave.so"

-------------------------------------------------------------------------------
Rule Name: User binaries (/usr/bin)
Severity Level: 66
-------------------------------------------------------------------------------

Modified:
"/usr/bin/innochecksum"
"/usr/bin/msql2mysql"
"/usr/bin/my_print_defaults"
"/usr/bin/myisam_ftdump"
"/usr/bin/myisamchk"
"/usr/bin/myisamlog"
"/usr/bin/myisampack"
"/usr/bin/mysql"
"/usr/bin/mysql_config"
"/usr/bin/mysql_convert_table_format"
"/usr/bin/mysql_find_rows"
"/usr/bin/mysql_fix_extensions"
"/usr/bin/mysql_install_db"
"/usr/bin/mysql_plugin"
"/usr/bin/mysql_secure_installation"
"/usr/bin/mysql_setpermission"
"/usr/bin/mysql_tzinfo_to_sql"
"/usr/bin/mysql_upgrade"
"/usr/bin/mysql_waitpid"
"/usr/bin/mysql_zap"
"/usr/bin/mysqlaccess"
"/usr/bin/mysqladmin"
"/usr/bin/mysqlbinlog"
"/usr/bin/mysqlbug"
"/usr/bin/mysqlcheck"
"/usr/bin/mysqld_multi"
"/usr/bin/mysqld_safe"
"/usr/bin/mysqldump"
"/usr/bin/mysqldumpslow"
"/usr/bin/mysqlhotcopy"
"/usr/bin/mysqlimport"
"/usr/bin/mysqlshow"
"/usr/bin/mysqlslap"
"/usr/bin/mysqltest"
"/usr/bin/perror"
"/usr/bin/replace"
"/usr/bin/resolve_stack_dump"
"/usr/bin/resolveip"
"/usr/bin/xmlcatalog"
"/usr/bin/xmllint"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/mysqld"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/run)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/run/mysqld/mysqld.pid"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/log)
Severity Level: 100
-------------------------------------------------------------------------------

Added:
"/var/log/sa/sa03"
"/var/log/sa/sar02"

Removed:
"/var/log/sa/sa25"
"/var/log/sa/sar24"

Modified:
"/var/log/rpmpkgs"

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/sysconfig)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/etc/sysconfig/mysqld"

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/rc.d/init.d)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/etc/rc.d/init.d/mysqld"

===============================================================================
Object Detail:
===============================================================================

-------------------------------------------------------------------------------
  Section: Unix File System
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Rule Name: Libraries (/usr/lib)
Severity Level: 66
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 20
  ----------------------------------------

Modified object name:  /usr/lib/libxml2.so.2

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Symbolic Link               Symbolic Link              
  Device Number        83                          83                         
* Inode Number         190418280                   190420601                  
  Mode                 lrwxrwxrwx                  lrwxrwxrwx                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 17                          17                         
* Modify Time          2013年06月10日 12時20分49秒
                                                   2013年08月02日 20時58分42秒
  Blocks               0                           0                          
  CRC32                CLdy3A                      CLdy3A                     
  MD5                  AJK6DL9Gzy/CU59ceMUAYC      AJK6DL9Gzy/CU59ceMUAYC     

Modified object name:  /usr/lib/libxml2.so.2.6.26

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190422503                   190418280                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 1252732                     1252732                    
* Modify Time          2013年03月05日 17時00分16秒
                                                   2013年07月31日 18時37分09秒
  Blocks               2456                        2456                       
* CRC32                DtoqRe                      ByJ8Ue                     
* MD5                  BodR9NDl+wcNjhe/cz3n43      BxaSe5FHO/Je0YH4+w6WzS     

Modified object name:  /usr/lib/mysql/INFO_BIN

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420437                   190420436                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2307                        2315                       
* Modify Time          2013年06月04日 21時37分01秒
                                                   2013年08月01日 18時44分15秒
  Blocks               8                           8                          
* CRC32                DWIt1q                      AHu+lp                     
* MD5                  AulAXOwjS/+W0nUTMZyfWh      BHVm+TuNP5G4BgoTzpUhRM     

Modified object name:  /usr/lib/mysql/INFO_SRC

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425146                   190420437                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 213                         219                        
* Modify Time          2013年06月04日 21時37分01秒
                                                   2013年08月01日 18時44分15秒
  Blocks               8                           8                          
* CRC32                D5MbNB                      Ahv8A2                     
* MD5                  DvOTDVBTKZqE7PhQ2/mul6      D5GVrgSQHXLpBd2V9k58td     

Modified object name:  /usr/lib/mysql/libmysqlclient.so.18

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Symbolic Link               Symbolic Link              
  Device Number        83                          83                         
* Inode Number         190419328                   190419445                  
  Mode                 lrwxrwxrwx                  lrwxrwxrwx                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 24                          24                         
* Modify Time          2013年06月10日 23時14分26秒
                                                   2013年08月02日 20時58分43秒
  Blocks               0                           0                          
  CRC32                BZ2lPu                      BZ2lPu                     
  MD5                  AIFXncAi4ENjtbG7PPAXHe      AIFXncAi4ENjtbG7PPAXHe     

Modified object name:  /usr/lib/mysql/libmysqlclient.so.18.0.0

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190419099                   190419328                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2884124                     2884476                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5648                        5648                       
* CRC32                BfZJrB                      A848pN                     
* MD5                  CXW2hEtiIS27Kzfn0QSCwu      C2jgXARViw/rWZ8qTd7aGL     

Modified object name:  /usr/lib/mysql/mysql_config

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420351                   190420350                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 7124                        7124                       
* Modify Time          2013年06月04日 21時37分01秒
                                                   2013年08月01日 18時44分15秒
  Blocks               16                          16                         
* CRC32                AdhJG1                      AKFL6M                     
* MD5                  AErms+uccwcflsj2QpCY2B      AAfkBpGFigZ7BeVeHKEW0m     

Modified object name:  /usr/lib/mysql/mysqlbug

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425147                   190421723                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 12094                       12094                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               24                          24                         
* CRC32                BRqpYC                      Bosg9g                     
* MD5                  C6TT5NLQEtenBbhCDuTFnu      C23p9gJhQMKT36TQkbYOn5     

Modified object name:  /usr/lib/mysql/plugin/adt_null.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425152                   190421724                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3580                        3580                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
* CRC32                CrtEWE                      DQTBNv                     
* MD5                  A9Nm3AUMUCkA9M/WPpSxBH      AoagD/wEy1Cgj9p1l1MXwD     

Modified object name:  /usr/lib/mysql/plugin/auth.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425153                   190421725                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 5356                        5356                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               16                          16                         
* CRC32                Aciqwi                      AbUrqf                     
* MD5                  DmrhC2WGqnviEdWtIeuoM+      DqVhPEkz04h6AC9hAkNUG+     

Modified object name:  /usr/lib/mysql/plugin/auth_socket.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425154                   190421726                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3832                        3832                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
* CRC32                DT11Df                      BO/94E                     
* MD5                  BDTY/+dAgfIaOKDV6Y9xax      CG+KDpTUbmDOxwWP9Rv3DH     

Modified object name:  /usr/lib/mysql/plugin/auth_test_plugin.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425155                   190421727                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 4280                        4280                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               16                          16                         
* CRC32                A5WJcc                      AeiuUq                     
* MD5                  Bv7lZsPQo0PsX7c4ckU2oh      DsNAN1hD8AHkQFpoAXVj03     

Modified object name:  /usr/lib/mysql/plugin/daemon_example.ini

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425156                   190421728                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 227                         227                        
* Modify Time          2013年05月17日 00時47分15秒
                                                   2013年07月15日 21時01分50秒
  Blocks               8                           8                          
  CRC32                AUzh+M                      AUzh+M                     
  MD5                  AGgj6JDciGz2B3ZXT6w4bj      AGgj6JDciGz2B3ZXT6w4bj     

Modified object name:  /usr/lib/mysql/plugin/libdaemon_example.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425157                   190421729                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 6100                        6100                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               16                          16                         
* CRC32                DN30gu                      BrO635                     
* MD5                  ANlVA1reKRdz+7S9AvjYcv      A7e78uoMlUvfV21rVlLH9i     

Modified object name:  /usr/lib/mysql/plugin/mypluglib.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425158                   190421730                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 4576                        4576                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               16                          16                         
* CRC32                A6/1td                      Da6VSR                     
* MD5                  BCG7SgAN+jqSP4+8JDPY0S      BOnXedEXrQnMeF+uXVBBGz     

Modified object name:  /usr/lib/mysql/plugin/qa_auth_client.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425159                   190421731                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3164                        3164                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
* CRC32                Cmu0L4                      CmnEjr                     
* MD5                  DPsIQ9R0Ng9HOT/GmuqFHS      D0CwuuObZfxyTMwbGD2BP4     

Modified object name:  /usr/lib/mysql/plugin/qa_auth_interface.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425160                   190421732                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 4652                        4652                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               16                          16                         
* CRC32                B5h7xs                      Cs0e6u                     
* MD5                  BlnnYzrqb/pPu0ScT1HMp3      BeVhBlBCmNIbX7TMiBP/Oe     

Modified object name:  /usr/lib/mysql/plugin/qa_auth_server.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425161                   190421733                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3416                        3416                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
* CRC32                AxSvFe                      C5nH8H                     
* MD5                  CpYTpGoY0vmdAm5TGeLqVP      DTKLOwwRIFxncvqZa5OJB4     

Modified object name:  /usr/lib/mysql/plugin/semisync_master.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425162                   190421734                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 35396                       35396                      
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               72                          72                         
* CRC32                CxwPV1                      BFQJA6                     
* MD5                  De7SB76a5ffwLHPR2ENj3B      AgEEd87PCoH3w+UHjBCGYZ     

Modified object name:  /usr/lib/mysql/plugin/semisync_slave.so

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190425163                   190421735                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 10200                       10200                      
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               24                          24                         
* CRC32                B4/Qqs                      D9FTrd                     
* MD5                  BxBQmhAjY7ZVorTeAPRjXq      BDrigrjoQXfXmgJFaK5DVb     

-------------------------------------------------------------------------------
Rule Name: User binaries (/usr/bin)
Severity Level: 66
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 40
  ----------------------------------------

Modified object name:  /usr/bin/innochecksum

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190419597                   190419512                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 7732                        7732                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               16                          16                         
* CRC32                Dl3Ino                      CyDwGu                     
* MD5                  AS1Nsg6zPQNJVa4Fj1pvAD      BkTWfskagNnq7HBPIeH3z0     

Modified object name:  /usr/bin/msql2mysql

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190422965                   190421717                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 1412                        1412                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               8                           8                          
  CRC32                CL6wnN                      CL6wnN                     
  MD5                  BSvNpF81/7QqfgMu6ptWVf      BSvNpF81/7QqfgMu6ptWVf     

Modified object name:  /usr/bin/my_print_defaults

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420320                   190421719                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2766488                     2766840                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5416                        5416                       
* CRC32                AHA6pa                      BnvhPG                     
* MD5                  AmGc5crzOgJe3j4pPMTU45      AKd12BRHReIZvY6xZQSpR1     

Modified object name:  /usr/bin/myisam_ftdump

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420258                   190419597                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3060180                     3060180                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5992                        5992                       
* CRC32                AB/0Ez                      B7/Hfc                     
* MD5                  BZ1bDVbi8vD6IPGp0XZltJ      Brp8JnFaXelY9G3ShSSwZG     

Modified object name:  /usr/bin/myisamchk

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420322                   190420258                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3186224                     3186224                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               6232                        6232                       
* CRC32                CFdNrs                      DQsAVM                     
* MD5                  DF/0DP36jcl1wBGqF44AmD      A5UWFCuAfkvPMfdgZZcDHK     

Modified object name:  /usr/bin/myisamlog

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420323                   190420322                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3047184                     3047184                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5960                        5960                       
* CRC32                DtMyo9                      AVqcXo                     
* MD5                  AWQB4yedlXMPx17tfteSus      CrNPCKpHg/6+werw/hxqXL     

Modified object name:  /usr/bin/myisampack

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420324                   190420323                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 3085140                     3085268                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               6040                        6040                       
* CRC32                DBJBKh                      Cd27H0                     
* MD5                  DkytyFvyL0beCPW6OHJB6U      Cqp27UbJ8vJ3JqxYPEPR+p     

Modified object name:  /usr/bin/mysql

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420321                   190420320                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 3129292                     3129324                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               6120                        6120                       
* CRC32                D0VmhV                      AxXoa2                     
* MD5                  AO3GIVlzTS+BaSoscH7143      Dhhj/txk1B5rbWsak/zdI+     

Modified object name:  /usr/bin/mysql_config

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420326                   190420321                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3408                        3408                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
  CRC32                D96fos                      D96fos                     
  MD5                  ARWTObRx9d6F6gKvXU0ERv      ARWTObRx9d6F6gKvXU0ERv     

Modified object name:  /usr/bin/mysql_convert_table_format

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420325                   190420324                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 4245                        4245                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               16                          16                         
  CRC32                Cb+TB1                      Cb+TB1                     
  MD5                  CFani4YxXgtqlvUOjlr6Vm      CFani4YxXgtqlvUOjlr6Vm      

Modified object name:  /usr/bin/mysql_find_rows

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420327                   190420326                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3315                        3315                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               8                           8                          
  CRC32                DNhUaN                      DNhUaN                     
  MD5                  CDiHx6rqkN118KM/eUjPnx      CDiHx6rqkN118KM/eUjPnx     

Modified object name:  /usr/bin/mysql_fix_extensions

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420328                   190420325                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 1261                        1261                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               8                           8                          
  CRC32                DfDI9b                      DfDI9b                     
  MD5                  D1krSDHpUNrqkXozQ29HBx      D1krSDHpUNrqkXozQ29HBx     

Modified object name:  /usr/bin/mysql_install_db

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420330                   190420328                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 14852                       14852                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               32                          32                         
  CRC32                CoFxQ9                      CoFxQ9                     
  MD5                  Ax++wBByst/39iouqYSxUy      Ax++wBByst/39iouqYSxUy     

Modified object name:  /usr/bin/mysql_plugin

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420331                   190420330                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2774912                     2775200                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5432                        5432                       
* CRC32                AIU8lf                      DS5A5/                     
* MD5                  DAtzJpvH3P5wB50WMVjmVU      DtoRyvD2FLzBwWKL1NLfJU     

Modified object name:  /usr/bin/mysql_secure_installation

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420332                   190420331                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 8198                        8198                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               24                          24                         
  CRC32                BI1p8L                      BI1p8L                     
  MD5                  BgnPfougffwLSZN9L8DQWS      BgnPfougffwLSZN9L8DQWS     

Modified object name:  /usr/bin/mysql_setpermission

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420333                   190420332                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 17473                       17473                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               40                          40                         
  CRC32                CchtvT                      CchtvT                     
  MD5                  Ah+Uy1ILoVOLX8PICklCOx      Ah+Uy1ILoVOLX8PICklCOx     

Modified object name:  /usr/bin/mysql_tzinfo_to_sql

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420334                   190420333                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2740540                     2740540                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5368                        5368                       
* CRC32                AS5Cne                      BzDe5T                     
* MD5                  CAg4AKlVkFWEvaRJJy+4bl      AmOrZHTx4vNQSqCRZxQn3U     

Modified object name:  /usr/bin/mysql_upgrade

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420335                   190420334                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2839256                     2841912                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5560                        5560                       
* CRC32                Cl2dbh                      B+oYK4                     
* MD5                  C3nXQ/2k/Z16RlfPkeaWFr      ABpJS5E/gmDQTpnxdAdWpB     

Modified object name:  /usr/bin/mysql_waitpid

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420329                   190420327                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2765684                     2765684                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5416                        5416                       
* CRC32                DACvO8                      DhUFrb                     
* MD5                  D0TaxgUcBPk09VER8lgJLO      D8ZWBAQ8a4ZdRrbmJQWC55     

Modified object name:  /usr/bin/mysql_zap

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420336                   190420335                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3888                        3888                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               8                           8                          
  CRC32                COno5x                      COno5x                     
  MD5                  CQ2WtTTm8OM/tPaSgIJN/7      CQ2WtTTm8OM/tPaSgIJN/7     

Modified object name:  /usr/bin/mysqlaccess

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420337                   190420329                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 111560                      111560                     
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               232                         232                        
  CRC32                ArJZEt                      ArJZEt                     
  MD5                  D3abBPCaVUD0w307GKdODV      D3abBPCaVUD0w307GKdODV     

Modified object name:  /usr/bin/mysqladmin

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420339                   190420337                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2885208                     2889240                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
* Blocks               5648                        5656                       
* CRC32                An8P6N                      AMoom5                     
* MD5                  Ce3g/lc+dMSzb3ZUc59Eg1      C1MFSEMn7+1oHeMJGA1dPg     

Modified object name:  /usr/bin/mysqlbinlog

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420340                   190420339                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3013400                     3013400                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5896                        5896                       
* CRC32                Cdqst2                      DeTyYc                     
* MD5                  AjDPpN7g3ULClWyfVQztZq      DoYD5x3GTsyzv6shTr9ulh     

Modified object name:  /usr/bin/mysqlbug

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420338                   190420336                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3404                        3404                       
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               8                           8                          
  CRC32                AKvsTl                      AKvsTl                     
  MD5                  C5y6nVTgsTjhoSEUjLNHSW      C5y6nVTgsTjhoSEUjLNHSW     

Modified object name:  /usr/bin/mysqlcheck

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420341                   190420340                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2882168                     2882488                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5640                        5640                       
* CRC32                BPAqgX                      AWclaD                     
* MD5                  BwmFh9QdcMLCIK0Zc4GRiv      CRPIFtYkJWPVYxFtbaEQuC     

Modified object name:  /usr/bin/mysqld_multi

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420342                   190420338                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 23759                       23759                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               48                          48                         
  CRC32                CQUqWp                      CQUqWp                     
  MD5                  AwfLtXOUdyGOOVIdwzybfm      AwfLtXOUdyGOOVIdwzybfm     

Modified object name:  /usr/bin/mysqld_safe

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420344                   190420342                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 24630                       24630                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               56                          56                         
  CRC32                DYBKDr                      DYBKDr                     
  MD5                  DHNs5ycTPJK5aW0iwPjusU      DHNs5ycTPJK5aW0iwPjusU     

Modified object name:  /usr/bin/mysqldump

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420343                   190420341                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2946132                     2946356                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5768                        5768                       
* CRC32                CkGEd2                      C2FsXg                     
* MD5                  CMqTsZtjcePlgwMIMFWCch      AW4Ig4/EWlb/kcCzq3SuB2     

Modified object name:  /usr/bin/mysqldumpslow

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190426698                   190421721                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 7402                        7402                       
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               16                          16                         
  CRC32                BvcbLf                      BvcbLf                     
  MD5                  DFxXraIaQTaVYQrx3lgOON      DFxXraIaQTaVYQrx3lgOON     

Modified object name:  /usr/bin/mysqlhotcopy

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420347                   190421722                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 34852                       34852                      
* Modify Time          2013年06月04日 21時18分47秒
                                                   2013年08月01日 18時26分32秒
  Blocks               72                          72                         
  CRC32                B85M1U                      B85M1U                     
  MD5                  COb15O7y5u0OhdB1wj/bXw      COb15O7y5u0OhdB1wj/bXw     

Modified object name:  /usr/bin/mysqlimport

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420346                   190420343                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2877528                     2877848                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5632                        5632                       
* CRC32                BZpAA4                      CSZ/bQ                     
* MD5                  AsdPNDgRScAmkDzz9IgZQf      CMKOf/fuSj4nvqx7pX0ZSW     

Modified object name:  /usr/bin/mysqlshow

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420349                   190420346                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2880436                     2880436                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5640                        5640                       
* CRC32                Bdairg                      BKlb9Z                     
* MD5                  DGAZqInW1EKCp3SVnsdlMs      Bckvo3ovV6QJSbz2tOjdOW     

Modified object name:  /usr/bin/mysqlslap

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420350                   190420349                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2896340                     2896692                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               5672                        5672                       
* CRC32                DojaGG                      DWUBve                     
* MD5                  CxGaBHyMdbqiWM2oyK3ETn      Dvf0xulL9HfnWFltYfUDLr     

Modified object name:  /usr/bin/mysqltest

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420348                   190420347                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 3078028                     3078028                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分30秒
  Blocks               6024                        6024                       
* CRC32                ALp5UC                      C8pQNN                     
* MD5                  C6msDhYfRqc5mqY/JdW+F4      BCjh3JvGD3dTUN0Kw003EE     

Modified object name:  /usr/bin/perror

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420352                   190420348                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2844592                     2844592                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5568                        5568                       
* CRC32                DLRpGe                      AJ3tvw                     
* MD5                  BKkL4KcOMdCpqoQTNh6Mv2      CfUhZvgYYkdKs3435uwDW1     

Modified object name:  /usr/bin/replace

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420382                   190420352                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2750288                     2750288                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5384                        5384                       
* CRC32                CWwLHD                      B89Gas                     
* MD5                  DBCxt9YnC8wg02UblEPAk/      Dsjmtx8BQhgsxZjWj/EX0h     

Modified object name:  /usr/bin/resolve_stack_dump

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420434                   190420382                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 2769756                     2769756                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5424                        5424                       
* CRC32                Cjd8dR                      BXgH7F                     
* MD5                  AK3gfNosylLxC/tzJCLfXt      AqjS1RVAYWMuuSkPNBL2DQ     

Modified object name:  /usr/bin/resolveip

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420436                   190420434                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
* Size                 2765648                     2765904                    
* Modify Time          2013年06月04日 21時37分24秒
                                                   2013年08月01日 18時44分31秒
  Blocks               5416                        5416                       
* CRC32                A8qbVv                      Bt/33i                     
* MD5                  B54PZHP/2dR8gddgtPaTWj      DuXrh+Qgv8tM1IQHxdJzl9     

Modified object name:  /usr/bin/xmlcatalog

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420601                   190417567                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 12500                       12500                      
* Modify Time          2013年03月05日 17時00分16秒
                                                   2013年07月31日 18時37分09秒
  Blocks               32                          32                         
* CRC32                Dhx79c                      CQ62/l                     
* MD5                  B8gFJwiV6UxrsSG0Nic7Rd      Dlqc2qHqQ7mYdhWJMrK3Uy     

Modified object name:  /usr/bin/xmllint

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190420602                   190419429                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 51916                       51916                      
* Modify Time          2013年03月05日 17時00分16秒
                                                   2013年07月31日 18時37分09秒
  Blocks               112                         112                        
* CRC32                D8cWAd                      DpAqjP                     
* MD5                  DSvUFF0119TX/8HD1oxsfL      DZbCM/z15LBc/z99iRm5Ta     

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys)
Severity Level: 100
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 1
  ----------------------------------------

Modified object name:  /var/lock/subsys/mysqld

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         191540813                   191536119                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/run)
Severity Level: 100
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 1
  ----------------------------------------

Modified object name:  /var/run/mysqld/mysqld.pid

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         191540812                   191536117                  
  Mode                 -rw-rw----                  -rw-rw----                 
  Num Links            1                           1                          
  UID                  mysql (27)                  mysql (27)                 
  GID                  mysql (27)                  mysql (27)                 

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/log)
Severity Level: 100
-------------------------------------------------------------------------------
  ----------------------------------------
  Added Objects: 2
  ----------------------------------------

Added object name:  /var/log/sa/sa03

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
* Object Type          ---                         Regular File               
* Device Number        ---                         83                         
* Inode Number         ---                         191529620                  
* Mode                 ---                         -rw-r--r--                 
* Num Links            ---                         1                          
* UID                  ---                         root (0)                   
* GID                  ---                         root (0)                   

Added object name:  /var/log/sa/sar02

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
* Object Type          ---                         Regular File               
* Device Number        ---                         83                         
* Inode Number         ---                         191529619                  
* Mode                 ---                         -rw-r--r--                 
* Num Links            ---                         1                          
* UID                  ---                         root (0)                   
* GID                  ---                         root (0)                   

  ----------------------------------------
  Removed Objects: 2
  ----------------------------------------

Removed object name:  /var/log/sa/sa25

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
* Object Type          Regular File                ---                        
* Device Number        83                          ---                        
* Inode Number         191529649                   ---                        
* Mode                 -rw-r--r--                  ---                        
* Num Links            1                           ---                        
* UID                  root (0)                    ---                        
* GID                  root (0)                    ---                        

Removed object name:  /var/log/sa/sar24

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
* Object Type          Regular File                ---                        
* Device Number        83                          ---                        
* Inode Number         191529658                   ---                        
* Mode                 -rw-r--r--                  ---                        
* Num Links            1                           ---                        
* UID                  root (0)                    ---                        
* GID                  root (0)                    ---                        

  ----------------------------------------
  Modified Objects: 1
  ----------------------------------------

Modified object name:  /var/log/rpmpkgs

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         191529670                   191529649                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/sysconfig)
Severity Level: 100
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 1
  ----------------------------------------

Modified object name:  /etc/sysconfig/mysqld

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190419512                   190419333                  
  Mode                 -rw-r--r--                  -rw-r--r--                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 224                         224                        
* Modify Time          2013年06月04日 21時37分01秒
                                                   2013年08月01日 18時44分15秒
  Blocks               8                           8                          
  CRC32                CF/Nrb                      CF/Nrb                     
  MD5                  BoYd2KAWd5Q0MNZPy+2IAZ      BoYd2KAWd5Q0MNZPy+2IAZ     

-------------------------------------------------------------------------------
Rule Name: Critical configuration files (/etc/rc.d/init.d)
Severity Level: 100
-------------------------------------------------------------------------------
  ----------------------------------------
  Modified Objects: 1
  ----------------------------------------

Modified object name:  /etc/rc.d/init.d/mysqld

  Property:            Expected                    Observed                   
  -------------        -----------                 -----------                
  Object Type          Regular File                Regular File               
  Device Number        83                          83                         
* Inode Number         190419333                   190421720                  
  Mode                 -rwxr-xr-x                  -rwxr-xr-x                 
  Num Links            1                           1                          
  UID                  root (0)                    root (0)                   
  GID                  root (0)                    root (0)                   
  Size                 6305                        6305                       
* Modify Time          2013年06月04日 21時37分01秒
                                                   2013年08月01日 18時44分15秒
  Blocks               16                          16                         
  CRC32                A8CcwK                      A8CcwK                     
  MD5                  BvXLW8W1EXGmyFnCCaRoLi      BvXLW8W1EXGmyFnCCaRoLi     

===============================================================================
Error Report:
===============================================================================

No Errors

-------------------------------------------------------------------------------
*** End of report ***

Tripwire 2.4 Portions copyright 2000 Tripwire, Inc. Tripwire is a registered
trademark of Tripwire, Inc. This software comes with ABSOLUTELY NO WARRANTY;
for details use --version. This is free software which may be redistributed
or modified only under certain conditions; see COPYING for details.
All rights reserved.

以上です。

コメントを残す