Environment
7.1 UNIX Agent
Situation
Issue where the df command would write an excessive number of ...no such file or directory... messages to the audit log.
Issue where the Log Manager was not collecting data after the syslog is configured to rotate log file.
Issue where the NetIQ UNIX agent would log buffer overflow alerts in the Linux_Audit log when you run any sudo command.
Issue where the Log Manager was not collecting data after the syslog is configured to rotate log file.
Issue where the NetIQ UNIX agent would log buffer overflow alerts in the Linux_Audit log when you run any sudo command.
Resolution
Step by step instructions are provided within the release notes.
1) Hotfix application:
- Apply Hotfix 72699 to the UNIX Agent Manager
- Apply Hotfix 72699 to the UNIX Agents via the patch manager (p71p25 , 7.1.0.25)
2) Rule updates:
- The Linux Audit Source rule was updated.
- If you have custom rule sets, please ensure to update them with the latest copy within the default rule set.
Additional Information
Formerly known as NETIQKB72699