Security Manager Unix file system source sometimes reports old files as new or deleted. (NETIQKB72375)

  • 7772375
  • 03-Jun-2010
  • 28-Jun-2010

Environment

This problem affects the 5.6 security agent and the 7.1 unified unix agent.

Situation

The file system rule group will some times report existing files as deleted and then later report them again as new.

Resolution

This hotfix fixes that flaw so the agent properly handles log files rolling.

Cause

When the last file in the directory is rolled and restarted a flaw in the sorting method of the rule group caused files to be compared improperly against the previously taken snapshot of the files in a directory.

Additional Information

Formerly known as NETIQKB72375