/usr/share/doc/samhain/manual.html/mod-db-fields.html is in samhain 4.1.4-2build1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. Modules</title><link rel="stylesheet" type="text/css" href="docbook.css"><meta name="generator" content="DocBook XSL Stylesheets V1.78.1"><link rel="home" href="index.html" title="The Samhain Host Integrity Monitoring System"><link rel="up" href="database-fields.html" title="Appendix D. List of database fields"><link rel="prev" href="database-fields.html" title="Appendix D. List of database fields"><link rel="next" href="sys-db-fields.html" title="3. Syslog"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><!--#if expr="! ($HTTP_USER_AGENT = /MSIE/)"--><!--#include virtual="/resources/ssi/header.html"--><!--#endif--><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. Modules</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="database-fields.html">Prev</a> </td><th width="60%" align="center">Appendix D. List of database fields</th><td width="20%" align="right"> <a accesskey="n" href="sys-db-fields.html">Next</a></td></tr></table><hr></div><div class="sect1"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="mod-db-fields"></a>2. Modules</h2></div></div></div><div class="variablelist"><dl class="variablelist"><dt><span class="term">module</span></dt><dd><p>Name of a samhain module (e.g. the module to
watch login/logout events). Used in
initialization/error reports for a module.</p></dd><dt><span class="term">return_code</span></dt><dd><p>Return code from a module. Used in
initialization/error reports for a module.</p></dd><dt><span class="term">syscall</span></dt><dd><p>ID of bad syscall. Formerly used by kernel
checking module.</p></dd><dt><span class="term">ip</span></dt><dd><p>IP address. Login/logout watch. Also used in
received syslog messages (see below).</p></dd><dt><span class="term">tty</span></dt><dd><p>Terminal used. Login/logout watch.</p></dd><dt><span class="term">time</span></dt><dd><p>Login/logout time. Also used in some other
messages (e.g. time to complete file check).</p></dd><dt><span class="term">fromhost</span></dt><dd><p>Host from which user is logged in. Login/logout
watch.</p></dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="database-fields.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="database-fields.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="sys-db-fields.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Appendix D. List of database fields </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 3. Syslog</td></tr></table></div><!--#if expr="! ($HTTP_USER_AGENT = /MSIE/)"--><!--#include virtual="/resources/ssi/footer.html"--><!--#endif--></body></html>
|