Loaded Plugins:

Alerts:

Plugin anaconda

Files copied:

• /root/anaconda-ks.cfg
• /root/install.log
• /root/install.log.syslog
• /var/log/anaconda.log
• /var/log/anaconda.syslog
• /var/log/anaconda.xlog

Plugin apache

Files copied:

• /etc/httpd/conf/httpd.conf
• /etc/httpd/conf.d/python.conf
• /etc/httpd/conf.d/mod_dnssd.conf
• /etc/httpd/conf.d/auth_mysql.conf
• /etc/httpd/conf.d/auth_pam.conf
• /etc/httpd/conf.d/authz_ldap.conf
• /etc/httpd/conf.d/perl.conf
• /etc/httpd/conf.d/system-config-httpd.conf
• /etc/httpd/conf.d/cobbler_svc.conf
• /etc/httpd/conf.d/cobbler.conf
• /etc/httpd/conf.d/mod_mono.conf
• /etc/httpd/conf.d/zoneminder.conf
• /etc/httpd/conf.d/auth_ntlm_winbind.conf
• /etc/httpd/conf.d/manual.conf
• /etc/httpd/conf.d/mod_geoip.conf
• /etc/httpd/conf.d/ssl.conf
• /etc/httpd/conf.d/mod_suphp.conf
• /etc/httpd/conf.d/proxy_ajp.conf
• /etc/httpd/conf.d/nss.conf
• /etc/httpd/conf.d/php.conf
• /etc/httpd/conf.d/mythweb.conf
• /etc/httpd/conf.d/BackupPC.conf
• /etc/httpd/conf.d/welcome.conf
• /etc/httpd/conf.d/mod_security.conf
• /etc/httpd/conf.d/mod_cband.conf
• /etc/httpd/conf.d/apreq.conf
• /etc/httpd/conf.d/fcgid.conf
• /etc/httpd/conf.d/mod_extract_forwarded.conf

Plugin emc

Plugin amd

Files copied:

• /etc/amd.conf
• /etc/amd.net
• /etc/rc.d/init.d/amd
• /etc/sysconfig/amd

Commands Executed:

• /bin/rpm -qV am-utils
• /bin/egrep -e 'automount|pid.*nfs' /proc/mounts
• /bin/mount | egrep -e 'automount|pid.*nfs'

Plugin autofs

Files copied:

• /etc/autofs_ldap_auth.conf
• /etc/auto.smb
• /etc/auto.net
• /etc/auto.misc
• /etc/auto.master
• /etc/sysconfig/autofs
• /etc/init.d/autofs

Commands Executed:

• /bin/rpm -qV autofs
• /etc/init.d/autofs status
• ps auxwww | grep automount
• /bin/egrep -e 'automount|pid.*nfs' /proc/mounts
• /bin/mount | egrep -e 'automount|pid.*nfs'
• /sbin/chkconfig --list autofs

Plugin bootloader

Files copied:

• /boot/grub/grub.conf
• /boot/grub/device.map

Commands Executed:

• /sbin/lilo -q
• /bin/ls -laR /boot

Plugin devicemapper

Files copied:

• /etc/lvm/lvm.conf
• /etc/multipath.conf

Commands Executed:

• /sbin/dmsetup info -c
• /sbin/dmsetup table
• /sbin/dmsetup status
• /usr/sbin/vgdisplay -vv
• /usr/sbin/vgscan -vvv
• /usr/sbin/pvscan -v
• /usr/sbin/lvs -a -o +devices
• /usr/sbin/pvs -a -v
• /usr/sbin/vgs -v
• /sbin/multipath -v4 -ll
• /usr/bin/systool -v -c -b scsi
• /bin/ls -laR /dev
• /bin/ls -laR /sys/block
• /usr/bin/udevinfo -ap /sys/block/loop0
• /usr/bin/udevinfo -ap /sys/block/loop1
• /usr/bin/udevinfo -ap /sys/block/loop2
• /usr/bin/udevinfo -ap /sys/block/loop3
• /usr/bin/udevinfo -ap /sys/block/loop4
• /usr/bin/udevinfo -ap /sys/block/loop5
• /usr/bin/udevinfo -ap /sys/block/loop6
• /usr/bin/udevinfo -ap /sys/block/loop7
• /usr/bin/udevinfo -ap /sys/block/sda
• /usr/bin/udevinfo -ap /sys/block/sr0
• /usr/bin/udevinfo -ap /sys/block/dm-0
• /usr/bin/udevinfo -ap /sys/block/dm-1

Plugin filesys

Files copied:

• /proc/filesystems
• /etc/fstab
• /proc/self/mounts
• /proc/mounts (symlink to self/mounts)
• /proc/mdstat
• /etc/mdadm.conf

Commands Executed:

• /bin/mount -l
• /bin/df -al
• /usr/sbin/lsof -b +M -n -l
• /sbin/blkid
• /sbin/fdisk -l
• /sbin/dumpe2fs /dev/mapper/vg_fail-lv_root
• /sbin/dumpe2fs /dev/sda1

Plugin general

Files copied:

• /etc/redhat-release (symlink to fedora-release)
• /etc/fedora-release
• /etc/inittab
• /etc/sos.conf
• /etc/sysconfig/sysstat
• /etc/sysconfig/xenstored
• /etc/sysconfig/prelink
• /etc/sysconfig/ipmi
• /etc/sysconfig/dhcpd
• /proc/stat
• /var/log/dmesg
• /var/log/messages
• /var/log/secure
• /var/log/sa/sa08
• /var/log/sa/sa04
• /var/log/sa/sa09
• /var/log/sa/sa11
• /var/log/sa/sa03
• /var/log/sa/sar05
• /var/log/sa/sa07
• /var/log/sa/sar10
• /var/log/sa/sa06
• /var/log/sa/sar03
• /var/log/sa/sa10
• /var/log/sa/sar06
• /var/log/sa/sa05
• /etc/exports

Commands Executed:

• /bin/dmesg
• /bin/hostname
• /bin/date
• /usr/bin/uptime

Plugin hardware

Files copied:

• /proc/partitions
• /proc/cpuinfo
• /proc/meminfo
• /proc/ioports
• /proc/interrupts
• /proc/scsi/sg/version
• /proc/scsi/sg/device_strs
• /proc/scsi/sg/devices
• /proc/scsi/sg/device_hdr
• /proc/scsi/sg/def_reserved_size
• /proc/scsi/sg/debug
• /proc/scsi/sg/allow_dio
• /proc/scsi/device_info
• /proc/scsi/scsi
• /proc/dma
• /proc/devices
• /proc/bus/pci/15/00.0
• /proc/bus/pci/03/00.0
• /proc/bus/pci/02/00.0
• /proc/bus/pci/01/00.0
• /proc/bus/pci/00/1f.3
• /proc/bus/pci/00/1f.2
• /proc/bus/pci/00/1f.0
• /proc/bus/pci/00/1e.0
• /proc/bus/pci/00/1d.7
• /proc/bus/pci/00/1d.3
• /proc/bus/pci/00/1d.2
• /proc/bus/pci/00/1d.1
• /proc/bus/pci/00/1d.0
• /proc/bus/pci/00/1c.3
• /proc/bus/pci/00/1c.2
• /proc/bus/pci/00/1c.1
• /proc/bus/pci/00/1c.0
• /proc/bus/pci/00/1b.0
• /proc/bus/pci/00/01.0
• /proc/bus/pci/00/00.0
• /proc/bus/pci/devices
• /proc/bus/pccard/drivers
• /proc/bus/input/handlers
• /proc/bus/input/devices
• /proc/bus/usb/005/002
• /proc/bus/usb/005/001
• /proc/bus/usb/004/001
• /proc/bus/usb/003/001
• /proc/bus/usb/002/001
• /proc/bus/usb/001/001
• /proc/bus/usb/devices

Commands Executed:

• /usr/share/rhn/up2dateclient/hardware.py
• /bin/echo -e "lspci: " ; /sbin/lspci ; /bin/echo -e " lspci -nvv: " ; /sbin/lspci -nvv ; /bin/echo -e " lspci -tv: " ; /sbin/lspci -tv
• /usr/sbin/dmidecode
• /sbin/lsusb
• /usr/bin/lshal
• /usr/bin/systool -c fc_host -v
• /usr/bin/systool -c scsi_host -v

Plugin i18n

Files copied:

• /etc/sysconfig/i18n
• /etc/X11/xinit/xinput.d/xim.conf
• /etc/X11/xinit/xinput.d/none.conf
• /etc/X11/xinit/xinput.d/ibus.conf

Commands Executed:

• /usr/bin/locale

Plugin ipsec

Files copied:

• /etc/racoon/psk.txt
• /etc/racoon/racoon.conf
• /etc/racoon/scripts/p1_up_down

Plugin kdump

Files copied:

• /etc/kdump.conf
• /etc/sysconfig/kdump

Plugin kernel

Files copied:

• /sys/module/kernel/parameters/initcall_debug
• /sys/module/kernel/parameters/pause_on_oops
• /sys/module/kernel/parameters/panic
• /sys/module/kernel/parameters/nousb
• /sys/module/powernow_k7/parameters/acpi_force
• /sys/module/speedstep_smi/parameters/smi_sig
• /sys/module/speedstep_smi/parameters/smi_cmd
• /sys/module/speedstep_smi/parameters/smi_port
• /sys/module/apm/parameters/smp
• /sys/module/apm/parameters/idle_period
• /sys/module/apm/parameters/idle_threshold
• /sys/module/apm/parameters/realmode_power_off
• /sys/module/apm/parameters/broken_psr
• /sys/module/apm/parameters/allow_ints
• /sys/module/apm/parameters/bounce_interval
• /sys/module/apm/parameters/power_off
• /sys/module/apm/parameters/debug
• /sys/module/printk/parameters/time
• /sys/module/kgdb/parameters/kgdb_use_con
• /sys/module/spurious/parameters/irqfixup
• /sys/module/spurious/parameters/noirqdebug
• /sys/module/pcie_aspm/parameters/policy
• /sys/module/pci_hotplug/parameters/debug
• /sys/module/pci_hotplug/parameters/debug_acpi
• /sys/module/pciehp/parameters/pciehp_force
• /sys/module/pciehp/parameters/pciehp_poll_time
• /sys/module/pciehp/parameters/pciehp_poll_mode
• /sys/module/pciehp/parameters/pciehp_debug
• /sys/module/pciehp/parameters/pciehp_detect_mode
• /sys/module/acpiphp/parameters/debug
• /sys/module/battery/parameters/cache_time
• /sys/module/dock/parameters/immediate_undock
• /sys/module/pci_slot/parameters/debug
• /sys/module/processor/parameters/latency_factor
• /sys/module/processor/parameters/ignore_ppc
• /sys/module/thermal/parameters/psv
• /sys/module/thermal/parameters/tzp
• /sys/module/thermal/parameters/crt
• /sys/module/thermal/parameters/act
• /sys/module/acpi/parameters/acpica_version
• /sys/module/keyboard/parameters/brl_nbchords
• /sys/module/keyboard/parameters/brl_timeout
• /sys/module/vt/parameters/underline
• /sys/module/vt/parameters/italic
• /sys/module/vt/parameters/default_blu
• /sys/module/vt/parameters/default_grn
• /sys/module/vt/parameters/default_red
• /sys/module/vt/parameters/default_utf8
• /sys/module/8250/parameters/probe_rsa
• /sys/module/8250/parameters/skip_txen_test
• /sys/module/8250/parameters/nr_uarts
• /sys/module/8250/parameters/share_irqs
• /sys/module/kgdboc/parameters/kgdboc
• /sys/module/devres/parameters/log
• /sys/module/kgdbts/parameters/kgdbts
• /sys/module/scsi_mod/parameters/scsi_logging_level
• /sys/module/scsi_mod/parameters/inq_timeout
• /sys/module/scsi_mod/parameters/max_report_luns
• /sys/module/scsi_mod/parameters/scan
• /sys/module/scsi_mod/parameters/max_luns
• /sys/module/scsi_mod/parameters/default_dev_flags
• /sys/module/sr_mod/parameters/xa_test
• /sys/module/sg/parameters/allow_dio
• /sys/module/sg/parameters/def_reserved_size
• /sys/module/sg/parameters/scatter_elem_sz
• /sys/module/libata/parameters/allow_tpm
• /sys/module/libata/parameters/noacpi
• /sys/module/libata/parameters/ata_probe_timeout
• /sys/module/libata/parameters/dma
• /sys/module/libata/parameters/ignore_hpa
• /sys/module/libata/parameters/fua
• /sys/module/libata/parameters/atapi_passthru16
• /sys/module/libata/parameters/atapi_dmadir
• /sys/module/libata/parameters/atapi_enabled
• /sys/module/libata/parameters/acpi_gtf_filter
• /sys/module/ahci/parameters/marvell_enable
• /sys/module/ahci/parameters/ahci_em_messages
• /sys/module/ahci/parameters/ignore_sss
• /sys/module/ahci/parameters/skip_host_reset
• /sys/module/pcmcia_core/parameters/cis_speed
• /sys/module/pcmcia_core/parameters/unreset_limit
• /sys/module/pcmcia_core/parameters/unreset_check
• /sys/module/pcmcia_core/parameters/unreset_delay
• /sys/module/pcmcia_core/parameters/reset_time
• /sys/module/pcmcia_core/parameters/vcc_settle
• /sys/module/pcmcia_core/parameters/shutdown_delay
• /sys/module/pcmcia_core/parameters/resume_delay
• /sys/module/pcmcia_core/parameters/setup_delay
• /sys/module/pcmcia_core/parameters/cis_width
• /sys/module/pcmcia/parameters/io_speed
• /sys/module/usbcore/parameters/autosuspend
• /sys/module/usbcore/parameters/use_both_schemes
• /sys/module/usbcore/parameters/old_scheme_first
• /sys/module/usbcore/parameters/initial_descriptor_timeout
• /sys/module/usbcore/parameters/blinkenlights
• /sys/module/usbcore/parameters/usbfs_snoop
• /sys/module/ehci_hcd/parameters/ignore_oc
• /sys/module/ehci_hcd/parameters/park
• /sys/module/ehci_hcd/parameters/log2_irq_thresh
• /sys/module/uhci_hcd/parameters/ignore_oc
• /sys/module/i8042/parameters/debug
• /sys/module/i8042/parameters/panicblink
• /sys/module/mousedev/parameters/tap_time
• /sys/module/mousedev/parameters/yres
• /sys/module/mousedev/parameters/xres
• /sys/module/psmouse/parameters/resync_time
• /sys/module/psmouse/parameters/resetafter
• /sys/module/psmouse/parameters/smartscroll
• /sys/module/psmouse/parameters/rate
• /sys/module/psmouse/parameters/resolution
• /sys/module/psmouse/parameters/proto
• /sys/module/psmouse/parameters/autorecal
• /sys/module/psmouse/parameters/post_interrupt_delay
• /sys/module/psmouse/parameters/recal_guard_time
• /sys/module/psmouse/parameters/spew_delay
• /sys/module/psmouse/parameters/jumpy_delay
• /sys/module/psmouse/parameters/recalib_delta
• /sys/module/psmouse/parameters/tpdebug
• /sys/module/md_mod/parameters/start_dirty_degraded
• /sys/module/md_mod/parameters/start_ro
• /sys/module/cpufreq/parameters/debug_ratelimit
• /sys/module/cpufreq/parameters/debug
• /sys/module/hid/parameters/debug
• /sys/module/hid_apple/parameters/fnmode
• /sys/module/usbhid/parameters/quirks
• /sys/module/usbhid/parameters/mousepoll
• /sys/module/nf_conntrack/parameters/hashsize
• /sys/module/nf_conntrack/parameters/expect_hashsize
• /sys/module/nf_conntrack/parameters/acct
• /sys/module/nf_conntrack_ipv4/parameters/hashsize
• /sys/module/tcp_cubic/parameters/hystart_low_window
• /sys/module/tcp_cubic/parameters/hystart_detect
• /sys/module/tcp_cubic/parameters/hystart
• /sys/module/tcp_cubic/parameters/tcp_friendliness
• /sys/module/tcp_cubic/parameters/bic_scale
• /sys/module/tcp_cubic/parameters/initial_ssthresh
• /sys/module/tcp_cubic/parameters/beta
• /sys/module/tcp_cubic/parameters/fast_convergence
• /sys/module/rfkill/parameters/default_state
• /sys/module/drm/parameters/debug
• /sys/module/radeon/parameters/no_gart_wb
• /sys/module/radeon/parameters/vramlimit
• /sys/module/radeon/parameters/gartsize
• /sys/module/radeon/parameters/vramzero
• /sys/module/radeon/parameters/agpmode
• /sys/module/radeon/parameters/r4xx_atom
• /sys/module/radeon/parameters/dynclks
• /sys/module/radeon/parameters/modeset
• /sys/module/radeon/parameters/no_wb
• /sys/module/e1000e/parameters/copybreak
• /sys/module/video/parameters/brightness_switch_enabled
• /sys/module/snd/parameters/cards_limit
• /sys/module/snd/parameters/major
• /sys/module/snd/parameters/slots
• /sys/module/mac80211/parameters/ieee80211_default_rc_algo
• /sys/module/rsrc_nonstatic/parameters/mem_limit
• /sys/module/rsrc_nonstatic/parameters/probe_io
• /sys/module/rsrc_nonstatic/parameters/probe_mem
• /sys/module/snd_timer/parameters/timer_tstamp_monotonic
• /sys/module/snd_timer/parameters/timer_limit
• /sys/module/yenta_socket/parameters/pwr_irqs_off
• /sys/module/yenta_socket/parameters/isa_probe
• /sys/module/yenta_socket/parameters/disable_clkrun
• /sys/module/iwl3945/parameters/queues_num
• /sys/module/iwl3945/parameters/disable_hw_scan
• /sys/module/iwl3945/parameters/debug
• /sys/module/iwl3945/parameters/hwcrypto
• /sys/module/iwl3945/parameters/disable
• /sys/module/iwl3945/parameters/antenna
• /sys/module/snd_pcm/parameters/maximum_substreams
• /sys/module/snd_pcm/parameters/preallocate_dma
• /sys/module/snd_hda_intel/parameters/power_save_controller
• /sys/module/snd_hda_intel/parameters/power_save
• /sys/module/snd_hda_intel/parameters/enable_msi
• /sys/module/snd_hda_intel/parameters/single_cmd
• /sys/module/snd_hda_intel/parameters/probe_only
• /sys/module/snd_hda_intel/parameters/probe_mask
• /sys/module/snd_hda_intel/parameters/bdl_pos_adj
• /sys/module/snd_hda_intel/parameters/position_fix
• /sys/module/snd_hda_intel/parameters/model
• /sys/module/snd_hda_intel/parameters/enable
• /sys/module/snd_hda_intel/parameters/id
• /sys/module/snd_hda_intel/parameters/index
• /sys/module/kvm/parameters/oos_shadow
• /sys/module/acpi_cpufreq/parameters/acpi_pstate_strict
• /sys/module/sunrpc/parameters/pool_mode
• /sys/module/usb_storage/parameters/quirks
• /sys/module/usb_storage/parameters/delay_use
• /sys/module/usb_storage/parameters/swi_tru_install
• /sys/module/usb_storage/parameters/option_zero_cd
• /sys/module/usbserial/parameters/debug
• /sys/module/option/parameters/debug
• /proc/slabinfo
• /lib/modules/2.6.29.2-126.fc11.i686.PAE/modules.dep
• /proc/cmdline
• /proc/driver/snd-page-alloc
• /proc/driver/rtc
• /proc/driver/nvram
• /proc/sys/kernel/tainted

Commands Executed:

• /sbin/lsmod
• /bin/uname -a
• /sbin/modinfo vfat fat ppp_deflate zlib_deflate ppp_async ppp_generic slhc option usbserial usb_storage fuse bridge stp llc autofs4 sunrpc ip6t_REJECT nf_conntrack_ipv6 ipv6 cpufreq_ondemand acpi_cpufreq kqemu dm_multipath kvm_intel kvm uinput snd_hda_codec_analog snd_hda_intel snd_hda_codec arc4 thinkpad_acpi ecb snd_hwdep snd_pcm iTCO_wdt pcspkr hwmon iwl3945 iTCO_vendor_support yenta_socket i2c_i801 snd_timer rsrc_nonstatic mac80211 snd joydev video e1000e soundcore irda lib80211 output snd_page_alloc cfg80211 crc_ccitt ata_generic pata_acpi radeon drm i2c_algo_bit i2c_core
• /sbin/sysctl -a
• /sbin/ksyms
• /usr/sbin/dkms status

Plugin ldap

Files copied:

• /etc/ldap.conf
• /etc/openldap/slapd.conf
• /etc/openldap/schema/duaconf.schema
• /etc/openldap/schema/openldap.ldif
• /etc/openldap/schema/java.schema
• /etc/openldap/schema/redhat/autofs.schema
• /etc/openldap/schema/corba.schema
• /etc/openldap/schema/core.ldif
• /etc/openldap/schema/nis.schema
• /etc/openldap/schema/cosine.schema
• /etc/openldap/schema/pmi.schema
• /etc/openldap/schema/cosine.ldif
• /etc/openldap/schema/inetorgperson.ldif
• /etc/openldap/schema/dhcp.schema
• /etc/openldap/schema/nadf.schema
• /etc/openldap/schema/core.schema
• /etc/openldap/schema/openldap.schema
• /etc/openldap/schema/nis.ldif
• /etc/openldap/schema/misc.schema
• /etc/openldap/schema/ppolicy.schema
• /etc/openldap/schema/collective.schema
• /etc/openldap/schema/inetorgperson.schema
• /etc/openldap/schema/dyngroup.schema
• /etc/openldap/ldap.conf

Plugin memory

Files copied:

• /proc/vmstat

Commands Executed:

• /bin/dmesg | grep -e 'e820.' -e 'aperature.'
• /usr/bin/free
• /usr/bin/free -m

Plugin networking

Files copied:

• /etc/nsswitch.conf
• /etc/yp.conf
• /etc/xinetd.conf
• /etc/xinetd.d/tftp
• /etc/xinetd.d/daytime-stream
• /etc/xinetd.d/cups-lpd
• /etc/xinetd.d/discard-dgram
• /etc/xinetd.d/daytime-dgram
• /etc/xinetd.d/pure-ftpd
• /etc/xinetd.d/tcpmux-server
• /etc/xinetd.d/echo-stream
• /etc/xinetd.d/rsync
• /etc/xinetd.d/chargen-stream
• /etc/xinetd.d/time-stream
• /etc/xinetd.d/cvs
• /etc/xinetd.d/time-dgram
• /etc/xinetd.d/echo-dgram
• /etc/xinetd.d/vtun
• /etc/xinetd.d/chargen-dgram
• /etc/xinetd.d/uucp
• /etc/xinetd.d/discard-stream
• /etc/hosts.rpmnew
• /etc/hosts
• /etc/host.conf
• /etc/hosts.deny
• /etc/hosts.allow
• /etc/resolv.conf

Commands Executed:

• /sbin/ifconfig -a
• /sbin/iptables -t filter -nvL
• /sbin/iptables -t nat -nvL
• /sbin/iptables -t mangle -nvL
• /sbin/route -n
• /bin/netstat -s
• /bin/netstat -neopa
• /sbin/ip route show table all
• /sbin/ip link
• /sbin/ip address
• /sbin/ifenslave -a
• /sbin/ethtool eth0
• /sbin/ethtool -i eth0
• /sbin/ethtool -k eth0
• /sbin/ethtool -S eth0

Plugin pam

Files copied:

• /etc/pam.d/dateconfig
• /etc/pam.d/preupgrade-cli
• /etc/pam.d/sshd
• /etc/pam.d/system-config-date
• /etc/pam.d/system-config-network-cmd
• /etc/pam.d/system-config-time
• /etc/pam.d/eject
• /etc/pam.d/halt
• /etc/pam.d/authconfig-tui
• /etc/pam.d/vmtoolsd
• /etc/pam.d/kscreensaver
• /etc/pam.d/config-util
• /etc/pam.d/ppp
• /etc/pam.d/gdm-password
• /etc/pam.d/smartcard-auth (symlink to smartcard-auth-ac)
• /etc/pam.d/zenmap-root
• /etc/pam.d/smtp (symlink to /etc/alternatives/mta-pam)
• /etc/alternatives/mta-pam (symlink to /etc/pam.d/smtp.sendmail)
• /etc/pam.d/smtp.sendmail
• /etc/pam.d/system-config-network
• /etc/pam.d/vpnc-disconnect
• /etc/pam.d/v4l-conf
• /etc/pam.d/gdm-autologin
• /etc/pam.d/kcheckpass
• /etc/pam.d/pure-ftpd
• /etc/pam.d/wlassistant
• /etc/pam.d/atd
• /etc/pam.d/seaudit
• /etc/pam.d/run_init
• /etc/pam.d/system-config-users
• /etc/pam.d/vpnc
• /etc/pam.d/wireshark
• /etc/pam.d/system-config-authentication
• /etc/pam.d/other
• /etc/pam.d/chsh
• /etc/pam.d/lshw-gui
• /etc/pam.d/authconfig-gtk
• /etc/pam.d/httpd
• /etc/pam.d/liveinst
• /etc/pam.d/pure-ftpwho
• /etc/pam.d/screen
• /etc/pam.d/system-config-keyboard
• /etc/pam.d/system-auth-ac
• /etc/pam.d/system-config-boot
• /etc/pam.d/system-config-netboot
• /etc/pam.d/system-config-lvm
• /etc/pam.d/system-config-audit-server
• /etc/pam.d/poweroff
• /etc/pam.d/smartcard-auth-ac
• /etc/pam.d/system-config-selinux
• /etc/pam.d/xserver
• /etc/pam.d/su
• /etc/pam.d/login
• /etc/pam.d/qpxtool
• /etc/pam.d/system-config-httpd
• /etc/pam.d/password-auth (symlink to password-auth-ac)
• /etc/pam.d/passwd
• /etc/pam.d/cups
• /etc/pam.d/liveusb-creator
• /etc/pam.d/system-auth (symlink to system-auth-ac)
• /etc/pam.d/xlock
• /etc/pam.d/system-config-rootpassword
• /etc/pam.d/vlock
• /etc/pam.d/setup
• /etc/pam.d/system-config-firewall
• /etc/pam.d/gnome-system-log
• /etc/pam.d/vm_applet_wrapper
• /etc/pam.d/selinux-polgengui
• /etc/pam.d/kdm
• /etc/pam.d/password-auth-ac
• /etc/pam.d/runuser-l
• /etc/pam.d/polkit
• /etc/pam.d/xdm
• /etc/pam.d/fingerprint-auth-ac
• /etc/pam.d/sudo
• /etc/security/group.conf
• /etc/security/pam_env.conf
• /etc/security/console.perms.d/10-blackberry.perms
• /etc/security/console.perms.d/50-default.perms
• /etc/security/console.perms.d/60-thinkfinger.perms
• /etc/security/console.apps/dateconfig
• /etc/security/console.apps/preupgrade-cli
• /etc/security/console.apps/system-config-date
• /etc/security/console.apps/system-config-network-cmd
• /etc/security/console.apps/system-config-time
• /etc/security/console.apps/eject
• /etc/security/console.apps/halt
• /etc/security/console.apps/authconfig-tui
• /etc/security/console.apps/config-util
• /etc/security/console.apps/zenmap-root
• /etc/security/console.apps/system-config-network
• /etc/security/console.apps/vpnc-disconnect
• /etc/security/console.apps/v4l-conf
• /etc/security/console.apps/wlassistant
• /etc/security/console.apps/seaudit
• /etc/security/console.apps/system-config-users
• /etc/security/console.apps/vpnc
• /etc/security/console.apps/wireshark
• /etc/security/console.apps/system-config-authentication
• /etc/security/console.apps/lshw-gui
• /etc/security/console.apps/authconfig-gtk
• /etc/security/console.apps/liveinst
• /etc/security/console.apps/pure-ftpwho
• /etc/security/console.apps/system-config-keyboard
• /etc/security/console.apps/system-config-boot
• /etc/security/console.apps/system-config-netboot
• /etc/security/console.apps/system-config-lvm
• /etc/security/console.apps/system-config-audit-server
• /etc/security/console.apps/poweroff
• /etc/security/console.apps/system-config-selinux
• /etc/security/console.apps/qpxtool
• /etc/security/console.apps/system-config-httpd
• /etc/security/console.apps/liveusb-creator
• /etc/security/console.apps/system-config-rootpassword
• /etc/security/console.apps/setup
• /etc/security/console.apps/system-config-firewall
• /etc/security/console.apps/gnome-system-log
• /etc/security/console.apps/vm_applet_wrapper
• /etc/security/console.apps/selinux-polgengui
• /etc/security/console.apps/system-config-language
• /etc/security/console.apps/seedit-gui
• /etc/security/console.apps/system-config-nfs
• /etc/security/console.apps/authconfig
• /etc/security/console.apps/reboot
• /etc/security/console.apps/system-config-cluster
• /etc/security/console.apps/system-switch-displaymanager
• /etc/security/console.apps/system-config-kdump
• /etc/security/console.apps/preupgrade
• /etc/security/console.apps/system-config-display
• /etc/security/access.conf
• /etc/security/limits.d/90-nproc.conf
• /etc/security/namespace.conf
• /etc/security/pam_winbind.conf
• /etc/security/pam_mount.conf.xml
• /etc/security/opasswd
• /etc/security/limits.conf
• /etc/security/namespace.init
• /etc/security/console.handlers
• /etc/security/sepermit.conf
• /etc/security/time.conf
• /etc/security/chroot.conf
• /etc/security/console.perms

Commands Executed:

• /bin/ls -laF /lib/security

Plugin printing

Files copied:

• /etc/cups/cupsd.conf
• /etc/cups/client.conf
• /etc/cups/snmp.conf
• /etc/cups/classes.conf
• /etc/cups/cups-pdf.conf
• /etc/cups/subscriptions.conf
• /etc/cups/printers.conf
• /var/log/cups/cups-pdf_log
• /var/log/cups/access_log-20090503
• /var/log/cups/page_log
• /var/log/cups/error_log-20090510
• /var/log/cups/cups-pdf_log-20090503
• /var/log/cups/error_log-20090503
• /var/log/cups/error_log
• /var/log/cups/page_log-20090503
• /var/log/cups/access_log

Plugin process

Commands Executed:

• /bin/ps auxwww
• /bin/ps auxwwwm
• /bin/ps alxwww
• /usr/bin/pstree
• /usr/sbin/lsof -b +M -n -l

Plugin libraries

Files copied:

• /etc/ld.so.conf
• /etc/ld.so.conf.d/qt-i386.conf
• /etc/ld.so.conf.d/xulrunner-32.conf
• /etc/ld.so.conf.d/kernel-2.6.29.2-126.fc11.i686.PAE.conf
• /etc/ld.so.conf.d/kernel-2.6.29.1-111.fc11.i686.PAE.conf
• /etc/ld.so.conf.d/tix-i386.conf
• /etc/ld.so.conf.d/kernel-2.6.29.1-102.fc11.i686.PAE.conf
• /etc/ld.so.conf.d/freetype-freeworld-i386.conf
• /etc/ld.so.conf.d/openais-i686.conf
• /etc/ld.so.conf.d/mysql-i386.conf

Commands Executed:

• /sbin/ldconfig -v
• /sbin/ldconfig -p

Plugin samba

Files copied:

• /etc/samba/smb.conf
• /etc/samba/lmhosts
• /etc/krb5.conf

Commands Executed:

• /usr/bin/wbinfo -g
• /usr/bin/wbinfo -u
• /usr/bin/testparm -s -v

Plugin sar

Commands Executed:

• /usr/bin/sar -A -f /var/log/sa/sa08
• /usr/bin/sar -A -f /var/log/sa/sa04
• /usr/bin/sar -A -f /var/log/sa/sa09
• /usr/bin/sar -A -f /var/log/sa/sa11
• /usr/bin/sar -A -f /var/log/sa/sa07

Plugin selinux

Files copied:

• /etc/selinux/config
• /etc/selinux/seedit/setrans.conf
• /etc/selinux/semanage.conf
• /etc/selinux/restorecond.conf

Commands Executed:

• /usr/bin/selinuxconfig
• /sbin/fixfiles check

Plugin sendmail

Files copied:

• /etc/mail/sendmail.cf
• /etc/mail/submit.mc
• /etc/mail/aliasesdb-stamp
• /etc/mail/access
• /etc/mail/virtusertable.db
• /etc/mail/mailertable.db
• /etc/mail/Makefile
• /etc/mail/access.db
• /etc/mail/domaintable.db
• /etc/mail/local-host-names
• /etc/mail/mailertable
• /etc/mail/helpfile
• /etc/mail/submit.cf
• /etc/mail/domaintable
• /etc/mail/virtusertable
• /etc/mail/make
• /etc/mail/trusted-users
• /etc/mail/sendmail.mc
• /var/log/maillog

Plugin smartcard

Files copied:

• /etc/reader.conf
• /etc/reader.conf.d//README
• /etc/pam_pkcs11//pam_pkcs11.conf
• /etc/pam_pkcs11//pkcs11_eventmgr.conf

Commands Executed:

• /usr/bin/pkcs11_inspect debug
• /usr/bin/pklogin_finder debug
• /bin/ls -l /usr/lib/pam_pkcs11/

Plugin ssh

Files copied:

• /etc/ssh/ssh_config
• /etc/ssh/sshd_config

Plugin startup

Files copied:

• /etc/rc.d/rc.local
• /etc/rc.d/rc1.d/K03xenner (symlink to ../init.d/xenner)
• /etc/rc.d/rc1.d/K15gpm (symlink to ../init.d/gpm)
• /etc/rc.d/rc1.d/S01sysstat (symlink to ../init.d/sysstat)
• /etc/rc.d/rc1.d/K01apt (symlink to ../init.d/apt)
• /etc/rc.d/rc1.d/K88rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc1.d/K98qemu (symlink to ../init.d/qemu)
• /etc/rc.d/rc1.d/K03libvirtd (symlink to ../init.d/libvirtd)
• /etc/rc.d/rc1.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc1.d/K88auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc1.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc1.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc1.d/K89portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc1.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc1.d/K35backuppc (symlink to ../init.d/backuppc)
• /etc/rc.d/rc1.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc1.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc1.d/K20corosync (symlink to ../init.d/corosync)
• /etc/rc.d/rc1.d/K45memcached (symlink to ../init.d/memcached)
• /etc/rc.d/rc1.d/K84bttrack (symlink to ../init.d/bttrack)
• /etc/rc.d/rc1.d/K45vtund (symlink to ../init.d/vtund)
• /etc/rc.d/rc1.d/K89iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc1.d/K36mysqld (symlink to ../init.d/mysqld)
• /etc/rc.d/rc1.d/K66gpsd (symlink to ../init.d/gpsd)
• /etc/rc.d/rc1.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc1.d/K70vblade (symlink to ../init.d/vblade)
• /etc/rc.d/rc1.d/K15pure-ftpd (symlink to ../init.d/pure-ftpd)
• /etc/rc.d/rc1.d/K04dkms_autoinstaller (symlink to ../init.d/dkms_autoinstaller)
• /etc/rc.d/rc1.d/K84NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc1.d/K50xinetd (symlink to ../init.d/xinetd)
• /etc/rc.d/rc1.d/K84btseed (symlink to ../init.d/btseed)
• /etc/rc.d/rc1.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc1.d/K02oddjobd (symlink to ../init.d/oddjobd)
• /etc/rc.d/rc1.d/K01modclusterd (symlink to ../init.d/modclusterd)
• /etc/rc.d/rc1.d/K45arpwatch (symlink to ../init.d/arpwatch)
• /etc/rc.d/rc1.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc1.d/K74zfs-fuse (symlink to ../init.d/zfs-fuse)
• /etc/rc.d/rc1.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc1.d/K99cobblerd (symlink to ../init.d/cobblerd)
• /etc/rc.d/rc1.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc1.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc1.d/K20openais (symlink to ../init.d/openais)
• /etc/rc.d/rc1.d/K85messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc1.d/K00xendomains (symlink to ../init.d/xendomains)
• /etc/rc.d/rc1.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc1.d/K10cups (symlink to ../init.d/cups)
• /etc/rc.d/rc1.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc1.d/K74pcscd (symlink to ../init.d/pcscd)
• /etc/rc.d/rc1.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc1.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc1.d/K87rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc1.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc1.d/K28amd (symlink to ../init.d/amd)
• /etc/rc.d/rc1.d/K85ebtables (symlink to ../init.d/ebtables)
• /etc/rc.d/rc1.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc1.d/K79cman (symlink to ../init.d/cman)
• /etc/rc.d/rc1.d/K72autofs (symlink to ../init.d/autofs)
• /etc/rc.d/rc1.d/K01xenconsoled (symlink to ../init.d/xenconsoled)
• /etc/rc.d/rc1.d/K10zvbid (symlink to ../init.d/zvbid)
• /etc/rc.d/rc1.d/K73ldap (symlink to ../init.d/ldap)
• /etc/rc.d/rc1.d/K35dhcrelay (symlink to ../init.d/dhcrelay)
• /etc/rc.d/rc1.d/K80kdump (symlink to ../init.d/kdump)
• /etc/rc.d/rc1.d/K50ttywatch (symlink to ../init.d/ttywatch)
• /etc/rc.d/rc1.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc1.d/K04kqemu (symlink to ../init.d/kqemu)
• /etc/rc.d/rc1.d/K87mcstrans (symlink to ../init.d/mcstrans)
• /etc/rc.d/rc1.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc1.d/K20jetty (symlink to ../init.d/jetty)
• /etc/rc.d/rc1.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc1.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc1.d/K85racoon (symlink to ../init.d/racoon)
• /etc/rc.d/rc1.d/K74ipmi (symlink to ../init.d/ipmi)
• /etc/rc.d/rc1.d/K50snmpd (symlink to ../init.d/snmpd)
• /etc/rc.d/rc1.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc1.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc1.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc1.d/K50snmptrapd (symlink to ../init.d/snmptrapd)
• /etc/rc.d/rc1.d/K14mythbackend (symlink to ../init.d/mythbackend)
• /etc/rc.d/rc1.d/K71lirc (symlink to ../init.d/lirc)
• /etc/rc.d/rc1.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc1.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc1.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc1.d/K00zoneminder (symlink to ../init.d/zoneminder)
• /etc/rc.d/rc1.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc1.d/K19ntop (symlink to ../init.d/ntop)
• /etc/rc.d/rc1.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc1.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc1.d/K54scanbuttond (symlink to ../init.d/scanbuttond)
• /etc/rc.d/rc1.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc1.d/K01xenstored (symlink to ../init.d/xenstored)
• /etc/rc.d/rc1.d/K12dc_client (symlink to ../init.d/dc_client)
• /etc/rc.d/rc1.d/K74acpid (symlink to ../init.d/acpid)
• /etc/rc.d/rc1.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc1.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc1.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc1.d/K01ricci (symlink to ../init.d/ricci)
• /etc/rc.d/rc1.d/K83arptables_jf (symlink to ../init.d/arptables_jf)
• /etc/rc.d/rc1.d/K01xend (symlink to ../init.d/xend)
• /etc/rc.d/rc1.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc1.d/K30sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc1.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc1.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc1.d/K95akmods (symlink to ../init.d/akmods)
• /etc/rc.d/rc1.d/K35dhcpd (symlink to ../init.d/dhcpd)
• /etc/rc.d/rc1.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc1.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc1.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc1.d/K10dc_server (symlink to ../init.d/dc_server)
• /etc/rc.d/rc2.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc2.d/K03xenner (symlink to ../init.d/xenner)
• /etc/rc.d/rc2.d/S01sysstat (symlink to ../init.d/sysstat)
• /etc/rc.d/rc2.d/S04kqemu (symlink to ../init.d/kqemu)
• /etc/rc.d/rc2.d/K01apt (symlink to ../init.d/apt)
• /etc/rc.d/rc2.d/S15mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc2.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc2.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc2.d/K03libvirtd (symlink to ../init.d/libvirtd)
• /etc/rc.d/rc2.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc2.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc2.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc2.d/S26zfs-fuse (symlink to ../init.d/zfs-fuse)
• /etc/rc.d/rc2.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc2.d/S05akmods (symlink to ../init.d/akmods)
• /etc/rc.d/rc2.d/K35backuppc (symlink to ../init.d/backuppc)
• /etc/rc.d/rc2.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc2.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc2.d/K20corosync (symlink to ../init.d/corosync)
• /etc/rc.d/rc2.d/K45memcached (symlink to ../init.d/memcached)
• /etc/rc.d/rc2.d/K84bttrack (symlink to ../init.d/bttrack)
• /etc/rc.d/rc2.d/K45vtund (symlink to ../init.d/vtund)
• /etc/rc.d/rc2.d/K89iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc2.d/K36mysqld (symlink to ../init.d/mysqld)
• /etc/rc.d/rc2.d/K66gpsd (symlink to ../init.d/gpsd)
• /etc/rc.d/rc2.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc2.d/K70vblade (symlink to ../init.d/vblade)
• /etc/rc.d/rc2.d/K15pure-ftpd (symlink to ../init.d/pure-ftpd)
• /etc/rc.d/rc2.d/S04dkms_autoinstaller (symlink to ../init.d/dkms_autoinstaller)
• /etc/rc.d/rc2.d/S90crond (symlink to ../init.d/crond)
• /etc/rc.d/rc2.d/K50xinetd (symlink to ../init.d/xinetd)
• /etc/rc.d/rc2.d/K84btseed (symlink to ../init.d/btseed)
• /etc/rc.d/rc2.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc2.d/K02oddjobd (symlink to ../init.d/oddjobd)
• /etc/rc.d/rc2.d/K01modclusterd (symlink to ../init.d/modclusterd)
• /etc/rc.d/rc2.d/K45arpwatch (symlink to ../init.d/arpwatch)
• /etc/rc.d/rc2.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc2.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc2.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc2.d/K99cobblerd (symlink to ../init.d/cobblerd)
• /etc/rc.d/rc2.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc2.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc2.d/K20openais (symlink to ../init.d/openais)
• /etc/rc.d/rc2.d/K00xendomains (symlink to ../init.d/xendomains)
• /etc/rc.d/rc2.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc2.d/S26acpid (symlink to ../init.d/acpid)
• /etc/rc.d/rc2.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc2.d/K74pcscd (symlink to ../init.d/pcscd)
• /etc/rc.d/rc2.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc2.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc2.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc2.d/S35qemu (symlink to ../init.d/qemu)
• /etc/rc.d/rc2.d/K28amd (symlink to ../init.d/amd)
• /etc/rc.d/rc2.d/K85ebtables (symlink to ../init.d/ebtables)
• /etc/rc.d/rc2.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc2.d/K79cman (symlink to ../init.d/cman)
• /etc/rc.d/rc2.d/K72autofs (symlink to ../init.d/autofs)
• /etc/rc.d/rc2.d/K01xenconsoled (symlink to ../init.d/xenconsoled)
• /etc/rc.d/rc2.d/K10zvbid (symlink to ../init.d/zvbid)
• /etc/rc.d/rc2.d/K73ldap (symlink to ../init.d/ldap)
• /etc/rc.d/rc2.d/K35dhcrelay (symlink to ../init.d/dhcrelay)
• /etc/rc.d/rc2.d/K20vmware-guestd (symlink to ../init.d/vmware-guestd)
• /etc/rc.d/rc2.d/K80kdump (symlink to ../init.d/kdump)
• /etc/rc.d/rc2.d/K50ttywatch (symlink to ../init.d/ttywatch)
• /etc/rc.d/rc2.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc2.d/K87mcstrans (symlink to ../init.d/mcstrans)
• /etc/rc.d/rc2.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc2.d/K20jetty (symlink to ../init.d/jetty)
• /etc/rc.d/rc2.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc2.d/S85gpm (symlink to ../init.d/gpm)
• /etc/rc.d/rc2.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc2.d/K85racoon (symlink to ../init.d/racoon)
• /etc/rc.d/rc2.d/K74ipmi (symlink to ../init.d/ipmi)
• /etc/rc.d/rc2.d/K50snmpd (symlink to ../init.d/snmpd)
• /etc/rc.d/rc2.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc2.d/S85httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc2.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc2.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc2.d/K50snmptrapd (symlink to ../init.d/snmptrapd)
• /etc/rc.d/rc2.d/K14mythbackend (symlink to ../init.d/mythbackend)
• /etc/rc.d/rc2.d/K71lirc (symlink to ../init.d/lirc)
• /etc/rc.d/rc2.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc2.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc2.d/K00zoneminder (symlink to ../init.d/zoneminder)
• /etc/rc.d/rc2.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc2.d/K19ntop (symlink to ../init.d/ntop)
• /etc/rc.d/rc2.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc2.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc2.d/K54scanbuttond (symlink to ../init.d/scanbuttond)
• /etc/rc.d/rc2.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc2.d/K01xenstored (symlink to ../init.d/xenstored)
• /etc/rc.d/rc2.d/K12dc_client (symlink to ../init.d/dc_client)
• /etc/rc.d/rc2.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc2.d/S55sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc2.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc2.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc2.d/K01ricci (symlink to ../init.d/ricci)
• /etc/rc.d/rc2.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc2.d/K83arptables_jf (symlink to ../init.d/arptables_jf)
• /etc/rc.d/rc2.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc2.d/K01xend (symlink to ../init.d/xend)
• /etc/rc.d/rc2.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc2.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc2.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc2.d/K35dhcpd (symlink to ../init.d/dhcpd)
• /etc/rc.d/rc2.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc2.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc2.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc2.d/K10dc_server (symlink to ../init.d/dc_server)
• /etc/rc.d/rc5.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc5.d/K03xenner (symlink to ../init.d/xenner)
• /etc/rc.d/rc5.d/S24avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc5.d/S01sysstat (symlink to ../init.d/sysstat)
• /etc/rc.d/rc5.d/S04kqemu (symlink to ../init.d/kqemu)
• /etc/rc.d/rc5.d/K01apt (symlink to ../init.d/apt)
• /etc/rc.d/rc5.d/S15mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc5.d/S99cobblerd (symlink to ../init.d/cobblerd)
• /etc/rc.d/rc5.d/S19rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc5.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc5.d/S25netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc5.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc5.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc5.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc5.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc5.d/S26zfs-fuse (symlink to ../init.d/zfs-fuse)
• /etc/rc.d/rc5.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc5.d/S05akmods (symlink to ../init.d/akmods)
• /etc/rc.d/rc5.d/K35backuppc (symlink to ../init.d/backuppc)
• /etc/rc.d/rc5.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc5.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc5.d/K20corosync (symlink to ../init.d/corosync)
• /etc/rc.d/rc5.d/K45memcached (symlink to ../init.d/memcached)
• /etc/rc.d/rc5.d/S98xend (symlink to ../init.d/xend)
• /etc/rc.d/rc5.d/K84bttrack (symlink to ../init.d/bttrack)
• /etc/rc.d/rc5.d/K45vtund (symlink to ../init.d/vtund)
• /etc/rc.d/rc5.d/S14nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc5.d/K36mysqld (symlink to ../init.d/mysqld)
• /etc/rc.d/rc5.d/K66gpsd (symlink to ../init.d/gpsd)
• /etc/rc.d/rc5.d/K70vblade (symlink to ../init.d/vblade)
• /etc/rc.d/rc5.d/K15pure-ftpd (symlink to ../init.d/pure-ftpd)
• /etc/rc.d/rc5.d/S04dkms_autoinstaller (symlink to ../init.d/dkms_autoinstaller)
• /etc/rc.d/rc5.d/S90crond (symlink to ../init.d/crond)
• /etc/rc.d/rc5.d/K84btseed (symlink to ../init.d/btseed)
• /etc/rc.d/rc5.d/K02oddjobd (symlink to ../init.d/oddjobd)
• /etc/rc.d/rc5.d/K01modclusterd (symlink to ../init.d/modclusterd)
• /etc/rc.d/rc5.d/K45arpwatch (symlink to ../init.d/arpwatch)
• /etc/rc.d/rc5.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc5.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc5.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc5.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc5.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc5.d/K20openais (symlink to ../init.d/openais)
• /etc/rc.d/rc5.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc5.d/S26acpid (symlink to ../init.d/acpid)
• /etc/rc.d/rc5.d/K74pcscd (symlink to ../init.d/pcscd)
• /etc/rc.d/rc5.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc5.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc5.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc5.d/S35qemu (symlink to ../init.d/qemu)
• /etc/rc.d/rc5.d/S07iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc5.d/S99xendomains (symlink to ../init.d/xendomains)
• /etc/rc.d/rc5.d/S95atd (symlink to ../init.d/atd)
• /etc/rc.d/rc5.d/K28amd (symlink to ../init.d/amd)
• /etc/rc.d/rc5.d/K85ebtables (symlink to ../init.d/ebtables)
• /etc/rc.d/rc5.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc5.d/K79cman (symlink to ../init.d/cman)
• /etc/rc.d/rc5.d/K10zvbid (symlink to ../init.d/zvbid)
• /etc/rc.d/rc5.d/K73ldap (symlink to ../init.d/ldap)
• /etc/rc.d/rc5.d/K35dhcrelay (symlink to ../init.d/dhcrelay)
• /etc/rc.d/rc5.d/S28autofs (symlink to ../init.d/autofs)
• /etc/rc.d/rc5.d/K20vmware-guestd (symlink to ../init.d/vmware-guestd)
• /etc/rc.d/rc5.d/K80kdump (symlink to ../init.d/kdump)
• /etc/rc.d/rc5.d/K50ttywatch (symlink to ../init.d/ttywatch)
• /etc/rc.d/rc5.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc5.d/S13iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc5.d/K87mcstrans (symlink to ../init.d/mcstrans)
• /etc/rc.d/rc5.d/K20jetty (symlink to ../init.d/jetty)
• /etc/rc.d/rc5.d/S85gpm (symlink to ../init.d/gpm)
• /etc/rc.d/rc5.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc5.d/K85racoon (symlink to ../init.d/racoon)
• /etc/rc.d/rc5.d/K74ipmi (symlink to ../init.d/ipmi)
• /etc/rc.d/rc5.d/K50snmpd (symlink to ../init.d/snmpd)
• /etc/rc.d/rc5.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc5.d/S85httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc5.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc5.d/S18rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc5.d/K50snmptrapd (symlink to ../init.d/snmptrapd)
• /etc/rc.d/rc5.d/K14mythbackend (symlink to ../init.d/mythbackend)
• /etc/rc.d/rc5.d/K71lirc (symlink to ../init.d/lirc)
• /etc/rc.d/rc5.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc5.d/K00zoneminder (symlink to ../init.d/zoneminder)
• /etc/rc.d/rc5.d/K19ntop (symlink to ../init.d/ntop)
• /etc/rc.d/rc5.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc5.d/S97xenconsoled (symlink to ../init.d/xenconsoled)
• /etc/rc.d/rc5.d/S56xinetd (symlink to ../init.d/xinetd)
• /etc/rc.d/rc5.d/S97libvirtd (symlink to ../init.d/libvirtd)
• /etc/rc.d/rc5.d/K54scanbuttond (symlink to ../init.d/scanbuttond)
• /etc/rc.d/rc5.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc5.d/K12dc_client (symlink to ../init.d/dc_client)
• /etc/rc.d/rc5.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc5.d/S55sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc5.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc5.d/S96xenstored (symlink to ../init.d/xenstored)
• /etc/rc.d/rc5.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc5.d/K01ricci (symlink to ../init.d/ricci)
• /etc/rc.d/rc5.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc5.d/K83arptables_jf (symlink to ../init.d/arptables_jf)
• /etc/rc.d/rc5.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc5.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc5.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc5.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc5.d/S13irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc5.d/S26haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc5.d/K35dhcpd (symlink to ../init.d/dhcpd)
• /etc/rc.d/rc5.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc5.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc5.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc5.d/K10dc_server (symlink to ../init.d/dc_server)
• /etc/rc.d/init.d/sysstat
• /etc/rc.d/init.d/xenstored
• /etc/rc.d/init.d/openvpn
• /etc/rc.d/init.d/sshd
• /etc/rc.d/init.d/vmware-guestd
• /etc/rc.d/init.d/ipmi
• /etc/rc.d/init.d/openais
• /etc/rc.d/init.d/nfslock
• /etc/rc.d/init.d/dhcpd
• /etc/rc.d/init.d/jetty

Commands Executed:

• /sbin/chkconfig --list
• /sbin/runlevel

Plugin system

Files copied:

• /proc/sys/kernel/sched_min_granularity_ns
• /proc/sys/kernel/sched_latency_ns
• /proc/sys/kernel/sched_wakeup_granularity_ns
• /proc/sys/kernel/sched_shares_ratelimit
• /proc/sys/kernel/sched_shares_thresh
• /proc/sys/kernel/sched_child_runs_first
• /proc/sys/kernel/sched_features
• /proc/sys/kernel/sched_migration_cost
• /proc/sys/kernel/sched_nr_migrate
• /proc/sys/kernel/sched_rt_period_us
• /proc/sys/kernel/sched_rt_runtime_us
• /proc/sys/kernel/sched_compat_yield
• /proc/sys/kernel/panic
• /proc/sys/kernel/exec-shield
• /proc/sys/kernel/core_uses_pid
• /proc/sys/kernel/core_pattern
• /etc/sysctl.conf
• /etc/cron.d/sysstat
• /etc/cron.d/smolt
• /etc/cron.d/0hourly
• /etc/cron.deny
• /etc/cron.hourly/0anacron
• /etc/cron.daily/makewhatis.cron
• /etc/cron.daily/prelink
• /etc/cron.daily/readahead.cron
• /etc/cron.daily/mlocate.cron
• /etc/cron.daily/logrotate
• /etc/cron.daily/apt.cron
• /etc/cron.daily/tmpwatch
• /etc/cron.daily/0logwatch (symlink to ../..//usr/share/logwatch/scripts/logwatch.pl)
• /etc/cron.monthly/readahead-monthly.cron
• /etc/cron.weekly/makewhatis.cron
• /etc/cron.weekly/raid-check
• /etc/crontab
• /etc/ntp.conf
• /etc/ntp/step-tickers
• /etc/ntp/ntpservers

Plugin systemtap

Commands Executed:

• /bin/rpm -qa | /bin/egrep -e kernel.*`uname -r` -e systemtap -e elfutils | sort
• /usr/bin/stap -V 2

Plugin x11

Files copied:

• /etc/X11/twm/system.twmrc
• /etc/X11/Xmodmap
• /etc/X11/xdm/Xstartup
• /etc/X11/xdm/GiveConsole
• /etc/X11/xdm/Xreset
• /etc/X11/xdm/Xaccess
• /etc/X11/xdm/xdm-config
• /etc/X11/xdm/Xsession (symlink to ../xinit/Xsession)
• /etc/X11/xdm/Xsetup_0
• /etc/X11/xdm/Xservers
• /etc/X11/xdm/TakeConsole
• /etc/X11/xdm/Xresources
• /etc/X11/xdm/Xwilling
• /etc/X11/xinit/xinitrc
• /var/log/Xorg.0.log
• /var/log/Xorg.1.log
• /etc/gdm/custom.conf
• /etc/gdm/gdm.schemas
• /etc/gdm/PostSession/Default
• /etc/gdm/Xsession (symlink to ../X11/xinit/Xsession)
• /etc/gdm/Init/Default
• /etc/gdm/PostLogin/Default.sample
• /etc/gdm/PreSession/Default

Commands Executed:

• /bin/dmesg | grep -e 'agpgart.'

Plugin xinetd

Plugin yum

Files copied:

• /etc/yum/pluginconf.d/blacklist.conf
• /etc/yum/pluginconf.d/refresh-packagekit.conf
• /etc/yum/pluginconf.d/whiteout.conf
• /etc/yum.repos.d/fedora-rawhide.repo
• /etc/yum.repos.d/bak/rpmfusion-free-updates.repo
• /etc/yum.repos.d/bak/rpmfusion-nonfree-rawhide.repo
• /etc/yum.repos.d/bak/rpmfusion-free-updates-testing.repo
• /etc/yum.repos.d/bak/rpmfusion-nonfree-updates-testing.repo
• /etc/yum.repos.d/bak/rpmfusion-free.repo
• /etc/yum.repos.d/bak/rpmfusion-nonfree.repo
• /etc/yum.repos.d/bak/rpmfusion-free-rawhide.repo
• /etc/yum.repos.d/bak/rpmfusion-nonfree-updates.repo
• /etc/yum.repos.d/fedora-updates.repo
• /etc/yum.repos.d/fedora.repo
• /etc/yum.repos.d/fedora-updates-testing.repo
• /etc/yum.conf
• /var/log/yum.log

Plugin rpm

Files copied:

• /var/log/rpmpkgs

Commands Executed:

• /bin/rpm -qa --qf="%{NAME}-%{VERSION}-%{RELEASE}-%{ARCH}~~%{INSTALLTIME:date} "|/bin/awk -F ~~ '{printf "%-60s%s\n",$1,$2}'
• /bin/rpm -Va