Loaded Plugins:

Alerts:

• kernel: Check for tainted kernel by module dcdbas, which is Dell OpenManage Server Administrator module

Plugin bootloader

Commands Executed:

• /sbin/lilo -q
• /bin/ls -laR /boot

Plugin devicemapper

Files copied:

• /etc/lvm/lvm.conf
• /etc/multipath.conf

Commands Executed:

• /sbin/dmsetup info -c
• /sbin/dmsetup table
• /sbin/dmsetup status
• /usr/sbin/vgdisplay -vv
• /usr/sbin/vgscan -vvv
• /usr/sbin/pvscan -v
• /usr/sbin/lvs -a -o +devices
• /usr/sbin/pvs -a -v
• /usr/sbin/vgs -v
• /sbin/multipath -v4 -ll
• /usr/bin/systool -v -c -b scsi
• /bin/ls -laR /dev
• /bin/ls -laR /sys/block
• /usr/bin/udevinfo -ap /sys/block/loop0
• /usr/bin/udevinfo -ap /sys/block/loop1
• /usr/bin/udevinfo -ap /sys/block/loop2
• /usr/bin/udevinfo -ap /sys/block/loop3
• /usr/bin/udevinfo -ap /sys/block/loop4
• /usr/bin/udevinfo -ap /sys/block/loop5
• /usr/bin/udevinfo -ap /sys/block/loop6
• /usr/bin/udevinfo -ap /sys/block/loop7
• /usr/bin/udevinfo -ap /sys/block/sda
• /usr/bin/udevinfo -ap /sys/block/sr0
• /usr/bin/udevinfo -ap /sys/block/dm-0
• /usr/bin/udevinfo -ap /sys/block/dm-1

Plugin emc

Plugin kernel

Files copied:

• /sys/module/kernel/parameters/initcall_debug
• /sys/module/kernel/parameters/pause_on_oops
• /sys/module/kernel/parameters/panic
• /sys/module/kernel/parameters/nousb
• /sys/module/powernow_k7/parameters/acpi_force
• /sys/module/speedstep_smi/parameters/smi_sig
• /sys/module/speedstep_smi/parameters/smi_cmd
• /sys/module/speedstep_smi/parameters/smi_port
• /sys/module/apm/parameters/smp
• /sys/module/apm/parameters/idle_period
• /sys/module/apm/parameters/idle_threshold
• /sys/module/apm/parameters/realmode_power_off
• /sys/module/apm/parameters/broken_psr
• /sys/module/apm/parameters/allow_ints
• /sys/module/apm/parameters/bounce_interval
• /sys/module/apm/parameters/power_off
• /sys/module/apm/parameters/debug
• /sys/module/printk/parameters/time
• /sys/module/kgdb/parameters/kgdb_use_con
• /sys/module/spurious/parameters/irqfixup
• /sys/module/spurious/parameters/noirqdebug
• /sys/module/pcie_aspm/parameters/policy
• /sys/module/pci_hotplug/parameters/debug
• /sys/module/pci_hotplug/parameters/debug_acpi
• /sys/module/pciehp/parameters/pciehp_force
• /sys/module/pciehp/parameters/pciehp_poll_time
• /sys/module/pciehp/parameters/pciehp_poll_mode
• /sys/module/pciehp/parameters/pciehp_debug
• /sys/module/pciehp/parameters/pciehp_detect_mode
• /sys/module/acpiphp/parameters/debug
• /sys/module/battery/parameters/cache_time
• /sys/module/dock/parameters/immediate_undock
• /sys/module/pci_slot/parameters/debug
• /sys/module/processor/parameters/latency_factor
• /sys/module/processor/parameters/ignore_ppc
• /sys/module/thermal/parameters/psv
• /sys/module/thermal/parameters/tzp
• /sys/module/thermal/parameters/crt
• /sys/module/thermal/parameters/act
• /sys/module/acpi/parameters/acpica_version
• /sys/module/keyboard/parameters/brl_nbchords
• /sys/module/keyboard/parameters/brl_timeout
• /sys/module/vt/parameters/underline
• /sys/module/vt/parameters/italic
• /sys/module/vt/parameters/default_blu
• /sys/module/vt/parameters/default_grn
• /sys/module/vt/parameters/default_red
• /sys/module/vt/parameters/default_utf8
• /sys/module/8250/parameters/probe_rsa
• /sys/module/8250/parameters/skip_txen_test
• /sys/module/8250/parameters/nr_uarts
• /sys/module/8250/parameters/share_irqs
• /sys/module/kgdboc/parameters/kgdboc
• /sys/module/devres/parameters/log
• /sys/module/kgdbts/parameters/kgdbts
• /sys/module/scsi_mod/parameters/scsi_logging_level
• /sys/module/scsi_mod/parameters/inq_timeout
• /sys/module/scsi_mod/parameters/max_report_luns
• /sys/module/scsi_mod/parameters/scan
• /sys/module/scsi_mod/parameters/max_luns
• /sys/module/scsi_mod/parameters/default_dev_flags
• /sys/module/sr_mod/parameters/xa_test
• /sys/module/sg/parameters/allow_dio
• /sys/module/sg/parameters/def_reserved_size
• /sys/module/sg/parameters/scatter_elem_sz
• /sys/module/libata/parameters/allow_tpm
• /sys/module/libata/parameters/noacpi
• /sys/module/libata/parameters/ata_probe_timeout
• /sys/module/libata/parameters/dma
• /sys/module/libata/parameters/ignore_hpa
• /sys/module/libata/parameters/fua
• /sys/module/libata/parameters/atapi_passthru16
• /sys/module/libata/parameters/atapi_dmadir
• /sys/module/libata/parameters/atapi_enabled
• /sys/module/libata/parameters/acpi_gtf_filter
• /sys/module/ahci/parameters/marvell_enable
• /sys/module/ahci/parameters/ahci_em_messages
• /sys/module/ahci/parameters/ignore_sss
• /sys/module/ahci/parameters/skip_host_reset
• /sys/module/pcmcia_core/parameters/cis_speed
• /sys/module/pcmcia_core/parameters/unreset_limit
• /sys/module/pcmcia_core/parameters/unreset_check
• /sys/module/pcmcia_core/parameters/unreset_delay
• /sys/module/pcmcia_core/parameters/reset_time
• /sys/module/pcmcia_core/parameters/vcc_settle
• /sys/module/pcmcia_core/parameters/shutdown_delay
• /sys/module/pcmcia_core/parameters/resume_delay
• /sys/module/pcmcia_core/parameters/setup_delay
• /sys/module/pcmcia_core/parameters/cis_width
• /sys/module/pcmcia/parameters/io_speed
• /sys/module/usbcore/parameters/autosuspend
• /sys/module/usbcore/parameters/use_both_schemes
• /sys/module/usbcore/parameters/old_scheme_first
• /sys/module/usbcore/parameters/initial_descriptor_timeout
• /sys/module/usbcore/parameters/blinkenlights
• /sys/module/usbcore/parameters/usbfs_snoop
• /sys/module/ehci_hcd/parameters/ignore_oc
• /sys/module/ehci_hcd/parameters/park
• /sys/module/ehci_hcd/parameters/log2_irq_thresh
• /sys/module/uhci_hcd/parameters/ignore_oc
• /sys/module/i8042/parameters/debug
• /sys/module/i8042/parameters/panicblink
• /sys/module/mousedev/parameters/tap_time
• /sys/module/mousedev/parameters/yres
• /sys/module/mousedev/parameters/xres
• /sys/module/psmouse/parameters/resync_time
• /sys/module/psmouse/parameters/resetafter
• /sys/module/psmouse/parameters/smartscroll
• /sys/module/psmouse/parameters/rate
• /sys/module/psmouse/parameters/resolution
• /sys/module/psmouse/parameters/proto
• /sys/module/psmouse/parameters/autorecal
• /sys/module/psmouse/parameters/post_interrupt_delay
• /sys/module/psmouse/parameters/recal_guard_time
• /sys/module/psmouse/parameters/spew_delay
• /sys/module/psmouse/parameters/jumpy_delay
• /sys/module/psmouse/parameters/recalib_delta
• /sys/module/psmouse/parameters/tpdebug
• /sys/module/md_mod/parameters/start_dirty_degraded
• /sys/module/md_mod/parameters/start_ro
• /sys/module/cpufreq/parameters/debug_ratelimit
• /sys/module/cpufreq/parameters/debug
• /sys/module/hid/parameters/debug
• /sys/module/hid_apple/parameters/fnmode
• /sys/module/usbhid/parameters/quirks
• /sys/module/usbhid/parameters/mousepoll
• /sys/module/nf_conntrack/parameters/hashsize
• /sys/module/nf_conntrack/parameters/expect_hashsize
• /sys/module/nf_conntrack/parameters/acct
• /sys/module/nf_conntrack_ipv4/parameters/hashsize
• /sys/module/tcp_cubic/parameters/hystart_low_window
• /sys/module/tcp_cubic/parameters/hystart_detect
• /sys/module/tcp_cubic/parameters/hystart
• /sys/module/tcp_cubic/parameters/tcp_friendliness
• /sys/module/tcp_cubic/parameters/bic_scale
• /sys/module/tcp_cubic/parameters/initial_ssthresh
• /sys/module/tcp_cubic/parameters/beta
• /sys/module/tcp_cubic/parameters/fast_convergence
• /sys/module/rfkill/parameters/default_state
• /sys/module/video/parameters/brightness_switch_enabled
• /sys/module/drm/parameters/debug
• /sys/module/nouveau/parameters/uscript
• /sys/module/nouveau/parameters/duallink
• /sys/module/nouveau/parameters/modeset
• /sys/module/nouveau/parameters/mm_enabled
• /sys/module/nouveau/parameters/noagp
• /sys/module/usbserial/parameters/debug
• /sys/module/rsrc_nonstatic/parameters/mem_limit
• /sys/module/rsrc_nonstatic/parameters/probe_io
• /sys/module/rsrc_nonstatic/parameters/probe_mem
• /sys/module/option/parameters/debug
• /sys/module/yenta_socket/parameters/pwr_irqs_off
• /sys/module/yenta_socket/parameters/isa_probe
• /sys/module/yenta_socket/parameters/disable_clkrun
• /sys/module/snd/parameters/cards_limit
• /sys/module/snd/parameters/major
• /sys/module/snd/parameters/slots
• /sys/module/snd_timer/parameters/timer_tstamp_monotonic
• /sys/module/snd_timer/parameters/timer_limit
• /sys/module/snd_pcm/parameters/maximum_substreams
• /sys/module/snd_pcm/parameters/preallocate_dma
• /sys/module/mac80211/parameters/ieee80211_default_rc_algo
• /sys/module/b43/parameters/btcoex
• /sys/module/b43/parameters/qos
• /sys/module/b43/parameters/nohwcrypt
• /sys/module/b43/parameters/hwpctl
• /sys/module/b43/parameters/fwpostfix
• /sys/module/b43/parameters/bad_frames_preempt
• /sys/module/snd_hda_intel/parameters/power_save_controller
• /sys/module/snd_hda_intel/parameters/power_save
• /sys/module/snd_hda_intel/parameters/enable_msi
• /sys/module/snd_hda_intel/parameters/single_cmd
• /sys/module/snd_hda_intel/parameters/probe_only
• /sys/module/snd_hda_intel/parameters/probe_mask
• /sys/module/snd_hda_intel/parameters/bdl_pos_adj
• /sys/module/snd_hda_intel/parameters/position_fix
• /sys/module/snd_hda_intel/parameters/model
• /sys/module/snd_hda_intel/parameters/enable
• /sys/module/snd_hda_intel/parameters/id
• /sys/module/snd_hda_intel/parameters/index
• /sys/module/acpi_cpufreq/parameters/acpi_pstate_strict
• /sys/module/sunrpc/parameters/pool_mode
• /sys/module/bnep/parameters/compress_dst
• /sys/module/bnep/parameters/compress_src
• /sys/module/sco/parameters/disable_esco
• /proc/slabinfo
• /lib/modules/2.6.29.4-167.fc11.i586/modules.dep
• /etc/modprobe.conf
• /proc/cmdline
• /proc/driver/snd-page-alloc
• /proc/driver/rtc
• /proc/driver/nvram
• /proc/sys/kernel/tainted

Commands Executed:

• /sbin/lsmod
• /bin/uname -a
• /sbin/modinfo ppp_deflate zlib_deflate ppp_async crc_ccitt ppp_generic slhc xts lrw gf128mul sha256_generic cbc dm_crypt vfat fat dm_round_robin raid10 raid456 async_xor async_memcpy async_tx xor raid1 raid0 fuse sco bridge stp llc bnep l2cap bluetooth sunrpc ip6t_REJECT nf_conntrack_ipv6 ip6table_filter ip6_tables ipv6 cpufreq_ondemand acpi_cpufreq dm_multipath uinput arc4 snd_hda_codec_idt ecb snd_hda_intel b43 snd_hda_codec mac80211 snd_hwdep snd_pcm cfg80211 snd_timer snd iTCO_wdt soundcore iTCO_vendor_support input_polldev tg3 snd_page_alloc yenta_socket option i2c_i801 rsrc_nonstatic usbserial ssb pcspkr joydev dell_laptop wmi dcdbas squashfs pata_acpi ata_generic nouveau drm i2c_algo_bit i2c_core video output
• /sbin/sysctl -a
• /sbin/ksyms
• /usr/sbin/dkms status

Alerts:

• Check for tainted kernel by module dcdbas, which is Dell OpenManage Server Administrator module

Plugin ldap

Files copied:

• /etc/ldap.conf
• /etc/openldap/ldap.conf

Plugin memory

Files copied:

• /proc/vmstat

Commands Executed:

• /bin/dmesg | grep -e 'e820.' -e 'aperature.'
• /usr/bin/free
• /usr/bin/free -m

Plugin apache

Files copied:

• /etc/httpd/conf/httpd.conf
• /etc/httpd/conf.d/mod_dnssd.conf
• /etc/httpd/conf.d/proxy_ajp.conf
• /etc/httpd/conf.d/welcome.conf

Plugin filesys

Files copied:

• /proc/filesystems
• /etc/fstab
• /proc/self/mounts
• /proc/mounts (symlink to self/mounts)
• /proc/mdstat

Commands Executed:

• /bin/mount -l
• /bin/df -al
• /usr/sbin/lsof -b +M -n -l
• /sbin/blkid
• /sbin/fdisk -l
• /sbin/dumpe2fs /dev/mapper/live-rw

Plugin general

Files copied:

• /etc/redhat-release (symlink to fedora-release)
• /etc/fedora-release
• /etc/inittab
• /etc/sos.conf
• /etc/sysconfig/httpd
• /etc/sysconfig/iptables-config
• /etc/sysconfig/wpa_supplicant
• /etc/sysconfig/keyboard
• /etc/sysconfig/sendmail
• /etc/sysconfig/iptables.old
• /etc/sysconfig/i18n
• /etc/sysconfig/irqbalance
• /etc/sysconfig/system-config-users
• /etc/sysconfig/rsyslog
• /etc/sysconfig/init
• /etc/sysconfig/ntpdate
• /etc/sysconfig/crontab
• /etc/sysconfig/atd
• /etc/sysconfig/cpuspeed
• /etc/sysconfig/prelink
• /etc/sysconfig/iptables
• /etc/sysconfig/ip6tables-config
• /etc/sysconfig/system-config-firewall.old
• /etc/sysconfig/authconfig
• /etc/sysconfig/ip6tables
• /etc/sysconfig/ip6tables.old
• /etc/sysconfig/netconsole
• /etc/sysconfig/auditd
• /etc/sysconfig/networking/profiles/default/hosts
• /etc/sysconfig/networking/profiles/default/resolv.conf
• /etc/sysconfig/ntpd
• /etc/sysconfig/irda
• /etc/sysconfig/samba
• /etc/sysconfig/clock
• /etc/sysconfig/readonly-root
• /etc/sysconfig/saslauthd
• /etc/sysconfig/udev
• /etc/sysconfig/selinux (symlink to ../selinux/config)
• /etc/sysconfig/modules/bluez-uinput.modules
• /etc/sysconfig/nspluginwrapper
• /etc/sysconfig/nfs
• /etc/sysconfig/crond
• /etc/sysconfig/lm_sensors
• /etc/sysconfig/network-scripts/ifdown-ippp
• /etc/sysconfig/network-scripts/ifup-plip
• /etc/sysconfig/network-scripts/ifdown-post
• /etc/sysconfig/network-scripts/ifdown-ipv6
• /etc/sysconfig/network-scripts/ifup-ipv6
• /etc/sysconfig/network-scripts/ifup-aliases
• /etc/sysconfig/network-scripts/network-functions-ipv6
• /etc/sysconfig/network-scripts/ifcfg-lo
• /etc/sysconfig/network-scripts/ifup-post
• /etc/sysconfig/network-scripts/ifdown-isdn (symlink to ifdown-ippp)
• /etc/sysconfig/network-scripts/ifup-ppp
• /etc/sysconfig/network-scripts/ifup-wireless
• /etc/sysconfig/network-scripts/ifup-isdn (symlink to ifup-ippp)
• /etc/sysconfig/network-scripts/ifdown-ipsec
• /etc/sysconfig/network-scripts/ifup-eth
• /etc/sysconfig/network-scripts/ifup-plusb
• /etc/sysconfig/network-scripts/ifup-bnep
• /etc/sysconfig/network-scripts/ifdown (symlink to ../../../sbin/ifdown)
• /proc/stat
• /var/log/dmesg
• /var/log/messages
• /var/log/secure
• /etc/exports

Commands Executed:

• /bin/dmesg
• /bin/hostname
• /bin/date
• /usr/bin/uptime

Plugin hardware

Files copied:

• /proc/partitions
• /proc/cpuinfo
• /proc/meminfo
• /proc/ioports
• /proc/interrupts
• /proc/scsi/sg/version
• /proc/scsi/sg/device_strs
• /proc/scsi/sg/devices
• /proc/scsi/sg/device_hdr
• /proc/scsi/sg/def_reserved_size
• /proc/scsi/sg/debug
• /proc/scsi/sg/allow_dio
• /proc/scsi/device_info
• /proc/scsi/scsi
• /proc/dma
• /proc/devices
• /proc/bus/pci/03/01.0
• /proc/bus/pci/09/00.0
• /proc/bus/pci/0c/00.0
• /proc/bus/pci/01/00.0
• /proc/bus/pci/00/1f.3
• /proc/bus/pci/00/1f.2
• /proc/bus/pci/00/1f.0
• /proc/bus/pci/00/1e.0
• /proc/bus/pci/00/1d.7
• /proc/bus/pci/00/1d.3
• /proc/bus/pci/00/1d.2
• /proc/bus/pci/00/1d.1
• /proc/bus/pci/00/1d.0
• /proc/bus/pci/00/1c.2
• /proc/bus/pci/00/1c.1
• /proc/bus/pci/00/1c.0
• /proc/bus/pci/00/1b.0
• /proc/bus/pci/00/01.0
• /proc/bus/pci/00/00.0
• /proc/bus/pci/devices
• /proc/bus/pccard/drivers
• /proc/bus/input/handlers
• /proc/bus/input/devices
• /proc/bus/usb/005/001
• /proc/bus/usb/004/002
• /proc/bus/usb/004/001
• /proc/bus/usb/003/001
• /proc/bus/usb/002/006
• /proc/bus/usb/002/005
• /proc/bus/usb/002/004
• /proc/bus/usb/002/003
• /proc/bus/usb/002/002
• /proc/bus/usb/002/001
• /proc/bus/usb/001/001
• /proc/bus/usb/devices

Commands Executed:

• /usr/share/rhn/up2dateclient/hardware.py
• /bin/echo -e "lspci: " ; /sbin/lspci ; /bin/echo -e " lspci -nvv: " ; /sbin/lspci -nvv ; /bin/echo -e " lspci -tv: " ; /sbin/lspci -tv
• /usr/sbin/dmidecode
• /sbin/lsusb
• /usr/bin/lshal
• /usr/bin/systool -c fc_host -v
• /usr/bin/systool -c scsi_host -v

Plugin i18n

Files copied:

• /etc/X11/xinit/xinput.d/ibus.conf
• /etc/X11/xinit/xinput.d/none.conf
• /etc/X11/xinit/xinput.d/xim.conf

Commands Executed:

• /usr/bin/locale

Plugin networking

Files copied:

• /etc/nsswitch.conf
• /etc/yp.conf
• /etc/xinetd.d/rsync
• /etc/hosts
• /etc/hosts.allow
• /etc/host.conf
• /etc/hosts.deny
• /etc/resolv.conf

Commands Executed:

• /sbin/ifconfig -a
• /sbin/iptables -t nat -nvL
• /sbin/iptables -t mangle -nvL
• /sbin/route -n
• /sbin/iptables -t filter -nvL
• /bin/netstat -s
• /bin/netstat -neopa
• /sbin/ip route show table all
• /sbin/ip link
• /sbin/ip address
• /sbin/ifenslave -a
• /sbin/ethtool eth0
• /sbin/ethtool -i eth0
• /sbin/ethtool -k eth0
• /sbin/ethtool -S eth0

Plugin pam

Files copied:

• /etc/pam.d/su
• /etc/pam.d/chsh
• /etc/pam.d/polkit
• /etc/pam.d/system-auth-ac
• /etc/pam.d/password-auth (symlink to password-auth-ac)
• /etc/pam.d/su-l
• /etc/pam.d/newrole
• /etc/pam.d/chfn
• /etc/pam.d/setup
• /etc/pam.d/gdm-password
• /etc/pam.d/run_init
• /etc/pam.d/smartcard-auth (symlink to smartcard-auth-ac)
• /etc/pam.d/eject
• /etc/pam.d/halt
• /etc/pam.d/preupgrade
• /etc/pam.d/system-config-keyboard
• /etc/pam.d/smartcard-auth-ac
• /etc/pam.d/config-util
• /etc/pam.d/system-config-users
• /etc/pam.d/atd
• /etc/pam.d/passwd
• /etc/pam.d/sudo-i
• /etc/pam.d/fingerprint-auth-ac
• /etc/pam.d/authconfig
• /etc/pam.d/gdm
• /etc/pam.d/system-config-network-cmd
• /etc/pam.d/ppp
• /etc/pam.d/sudo
• /etc/pam.d/authconfig-tui
• /etc/pam.d/cups
• /etc/pam.d/system-config-date
• /etc/pam.d/gnome-screensaver
• /etc/pam.d/system-auth (symlink to system-auth-ac)
• /etc/pam.d/authconfig-gtk
• /etc/pam.d/reboot
• /etc/pam.d/password-auth-ac
• /etc/pam.d/selinux-polgengui
• /etc/pam.d/system-config-network
• /etc/pam.d/gdm-fingerprint
• /etc/pam.d/system-config-boot
• /etc/pam.d/system-config-lvm
• /etc/pam.d/poweroff
• /etc/pam.d/smtp.sendmail
• /etc/pam.d/runuser
• /etc/pam.d/sshd
• /etc/pam.d/fingerprint-auth (symlink to fingerprint-auth-ac)
• /etc/pam.d/smtp (symlink to /etc/alternatives/mta-pam)
• /etc/alternatives/mta-pam (symlink to /etc/pam.d/smtp.sendmail)
• /etc/security/sepermit.conf
• /etc/security/console.apps/setup
• /etc/security/console.apps/eject
• /etc/security/console.apps/halt
• /etc/security/console.apps/preupgrade
• /etc/security/console.apps/system-config-keyboard
• /etc/security/console.apps/config-util
• /etc/security/console.apps/system-config-users
• /etc/security/console.apps/authconfig
• /etc/security/console.apps/system-config-network-cmd
• /etc/security/console.apps/authconfig-tui
• /etc/security/console.apps/system-config-date
• /etc/security/console.apps/authconfig-gtk
• /etc/security/console.apps/reboot
• /etc/security/console.apps/selinux-polgengui
• /etc/security/console.apps/system-config-network
• /etc/security/console.apps/system-config-boot
• /etc/security/console.apps/system-config-lvm
• /etc/security/console.apps/poweroff
• /etc/security/console.apps/system-config-rootpassword
• /etc/security/console.apps/system-config-time
• /etc/security/console.apps/system-config-language
• /etc/security/console.apps/liveinst
• /etc/security/console.apps/gnome-system-log
• /etc/security/console.apps/system-config-authentication
• /etc/security/console.apps/preupgrade-cli
• /etc/security/console.apps/dateconfig
• /etc/security/console.apps/system-config-selinux
• /etc/security/console.apps/system-config-firewall
• /etc/security/limits.conf
• /etc/security/console.perms
• /etc/security/pam_winbind.conf
• /etc/security/namespace.conf
• /etc/security/console.handlers
• /etc/security/pam_env.conf
• /etc/security/chroot.conf
• /etc/security/group.conf
• /etc/security/access.conf
• /etc/security/opasswd
• /etc/security/console.perms.d/50-default.perms
• /etc/security/namespace.init
• /etc/security/time.conf
• /etc/security/limits.d/90-nproc.conf

Commands Executed:

• /bin/ls -laF /lib/security

Plugin printing

Files copied:

• /etc/cups/printers.conf
• /etc/cups/cupsd.conf
• /etc/cups/subscriptions.conf
• /etc/cups/client.conf
• /etc/cups/classes.conf
• /etc/cups/snmp.conf

Plugin process

Commands Executed:

• /bin/ps auxwww
• /bin/ps auxwwwm
• /bin/ps alxwww
• /usr/bin/pstree
• /usr/sbin/lsof -b +M -n -l

Plugin libraries

Files copied:

• /etc/ld.so.conf
• /etc/ld.so.conf.d/kernel-2.6.29.4-167.fc11.i586.conf
• /etc/ld.so.conf.d/xulrunner-32.conf

Commands Executed:

• /sbin/ldconfig -v
• /sbin/ldconfig -p

Plugin samba

Files copied:

• /etc/samba/lmhosts
• /etc/samba/smb.conf
• /etc/krb5.conf

Commands Executed:

• /usr/bin/wbinfo -g
• /usr/bin/wbinfo -u
• /usr/bin/testparm -s -v

Plugin selinux

Files copied:

• /etc/selinux/config
• /etc/selinux/semanage.conf
• /etc/selinux/restorecond.conf

Commands Executed:

• /usr/bin/selinuxconfig
• /sbin/fixfiles check

Plugin sendmail

Files copied:

• /etc/mail/aliasesdb-stamp
• /etc/mail/domaintable.db
• /etc/mail/sendmail.cf
• /etc/mail/submit.cf
• /etc/mail/virtusertable
• /etc/mail/access.db
• /etc/mail/submit.mc
• /etc/mail/sendmail.mc
• /etc/mail/virtusertable.db
• /etc/mail/mailertable.db
• /etc/mail/make
• /etc/mail/mailertable
• /etc/mail/local-host-names
• /etc/mail/domaintable
• /etc/mail/helpfile
• /etc/mail/trusted-users
• /etc/mail/Makefile
• /etc/mail/access
• /var/log/maillog

Plugin smartcard

Files copied:

• /etc/pam_pkcs11//pam_pkcs11.conf
• /etc/pam_pkcs11//pkcs11_eventmgr.conf

Commands Executed:

• /usr/bin/pkcs11_inspect debug
• /usr/bin/pklogin_finder debug
• /bin/ls -l /usr/lib/pam_pkcs11/

Plugin ssh

Files copied:

• /etc/ssh/ssh_config
• /etc/ssh/sshd_config

Plugin startup

Files copied:

• /etc/rc.d/rc4.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc4.d/S99livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc4.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc4.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc4.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc4.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc4.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc4.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc4.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc4.d/S13iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc4.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc4.d/S08ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc4.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc4.d/S26haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc4.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc4.d/S07iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc4.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc4.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc4.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc4.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc4.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc4.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc4.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc4.d/S25netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc4.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc4.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc4.d/S50bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc4.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc4.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc4.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc4.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc4.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc4.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc4.d/S08iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc4.d/S00livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc4.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc4.d/S14nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc4.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc4.d/S19rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc4.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc4.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc4.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc4.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc4.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc4.d/S24avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc4.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc4.d/S18rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc4.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc4.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc4.d/S13irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc4.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc4.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc4.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc0.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc0.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc0.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc0.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc0.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc0.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc0.d/K88auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc0.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc0.d/K89portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc0.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc0.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc0.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc0.d/K87rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc0.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc0.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc0.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc0.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc0.d/S00killall (symlink to ../init.d/killall)
• /etc/rc.d/rc0.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc0.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc0.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc0.d/K84NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc0.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc0.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc0.d/K88rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc0.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc0.d/K99cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc0.d/K01livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc0.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc0.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc0.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc0.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc0.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc0.d/S01halt (symlink to ../init.d/halt)
• /etc/rc.d/rc0.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc0.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc0.d/K99livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc0.d/K10cups (symlink to ../init.d/cups)
• /etc/rc.d/rc0.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc0.d/K85messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc0.d/K30sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc0.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc0.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc0.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc0.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc0.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc0.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc0.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc0.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc0.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc0.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc0.d/K75udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc0.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc0.d/K89iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc3.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc3.d/S99livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc3.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc3.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc3.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc3.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc3.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc3.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc3.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc3.d/S13iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc3.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc3.d/S08ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc3.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc3.d/S26haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc3.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc3.d/S07iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc3.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc3.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc3.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc3.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc3.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc3.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc3.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc3.d/S25netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc3.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc3.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc3.d/S50bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc3.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc3.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc3.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc3.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc3.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc3.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc3.d/S08iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc3.d/S00livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc3.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc3.d/S14nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc3.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc3.d/S19rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc3.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc3.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc3.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc3.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc3.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc3.d/S24avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc3.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc3.d/S18rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc3.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc3.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc3.d/S13irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc3.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc3.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc3.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc1.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc1.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc1.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc1.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc1.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc1.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc1.d/K88auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc1.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc1.d/K89portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc1.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc1.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc1.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc1.d/K87rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc1.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc1.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc1.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc1.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc1.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc1.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc1.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc1.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc1.d/K84NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc1.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc1.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc1.d/K88rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc1.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc1.d/K01livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc1.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc1.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc1.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc1.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc1.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc1.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc1.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc1.d/K99livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc1.d/K10cups (symlink to ../init.d/cups)
• /etc/rc.d/rc1.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc1.d/K85messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc1.d/K30sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc1.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc1.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc1.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc1.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc1.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc1.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc1.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc1.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc1.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc1.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc1.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc1.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc1.d/K89iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/init.d/httpd
• /etc/rc.d/init.d/rpcgssd
• /etc/rc.d/init.d/functions
• /etc/rc.d/init.d/firstboot
• /etc/rc.d/init.d/wpa_supplicant
• /etc/rc.d/init.d/nscd
• /etc/rc.d/init.d/killall
• /etc/rc.d/init.d/sendmail
• /etc/rc.d/init.d/rpcsvcgssd
• /etc/rc.d/init.d/avahi-daemon
• /etc/rc.d/init.d/dnsmasq
• /etc/rc.d/init.d/cups-config-daemon
• /etc/rc.d/init.d/livesys-late
• /etc/rc.d/init.d/irqbalance
• /etc/rc.d/init.d/winbind
• /etc/rc.d/init.d/halt
• /etc/rc.d/init.d/netfs
• /etc/rc.d/init.d/rdisc
• /etc/rc.d/init.d/livesys
• /etc/rc.d/init.d/rsyslog
• /etc/rc.d/init.d/multipathd
• /etc/rc.d/init.d/ntpdate
• /etc/rc.d/init.d/atd
• /etc/rc.d/init.d/netplugd
• /etc/rc.d/init.d/cpuspeed
• /etc/rc.d/init.d/nfslock
• /etc/rc.d/init.d/openvpn
• /etc/rc.d/init.d/psacct
• /etc/rc.d/init.d/iptables
• /etc/rc.d/init.d/restorecond
• /etc/rc.d/init.d/mdmonitor
• /etc/rc.d/init.d/rpcidmapd
• /etc/rc.d/init.d/ip6tables
• /etc/rc.d/init.d/iscsid
• /etc/rc.d/init.d/messagebus
• /etc/rc.d/init.d/netconsole
• /etc/rc.d/init.d/auditd
• /etc/rc.d/init.d/cups
• /etc/rc.d/init.d/ntpd
• /etc/rc.d/init.d/irda
• /etc/rc.d/init.d/saslauthd
• /etc/rc.d/init.d/sshd
• /etc/rc.d/init.d/haldaemon
• /etc/rc.d/init.d/portreserve
• /etc/rc.d/init.d/iscsi
• /etc/rc.d/init.d/nfs
• /etc/rc.d/init.d/crond
• /etc/rc.d/init.d/lm_sensors
• /etc/rc.d/init.d/smolt
• /etc/rc.d/init.d/ypbind
• /etc/rc.d/init.d/udev-post
• /etc/rc.d/init.d/network
• /etc/rc.d/init.d/bluetooth
• /etc/rc.d/init.d/smartd
• /etc/rc.d/init.d/NetworkManager
• /etc/rc.d/init.d/rpcbind
• /etc/rc.d/rc.local
• /etc/rc.d/rc.sysinit
• /etc/rc.d/rc2.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc2.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc2.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc2.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc2.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc2.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc2.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc2.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc2.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc2.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc2.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc2.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc2.d/S08ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc2.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc2.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc2.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc2.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc2.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc2.d/S90crond (symlink to ../init.d/crond)
• /etc/rc.d/rc2.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc2.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc2.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc2.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc2.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc2.d/K01livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc2.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc2.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc2.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc2.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc2.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc2.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc2.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc2.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc2.d/K99livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc2.d/S08iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc2.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc2.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc2.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc2.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc2.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc2.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc2.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc2.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc2.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc2.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc2.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc2.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc2.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc2.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc2.d/S15mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc2.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc2.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc2.d/K89iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc5.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc5.d/S99livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc5.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc5.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc5.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc5.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc5.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc5.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc5.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc5.d/S13iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc5.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc5.d/S08ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc5.d/S13rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc5.d/S26haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc5.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc5.d/S07iscsid (symlink to ../init.d/iscsid)
• /etc/rc.d/rc5.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc5.d/S06cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc5.d/S11auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc5.d/S11portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc5.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc5.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc5.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc5.d/S25netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc5.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc5.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc5.d/S50bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc5.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc5.d/S27NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc5.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc5.d/S99local (symlink to ../rc.local)
• /etc/rc.d/rc5.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc5.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc5.d/S08iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc5.d/S00livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc5.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc5.d/S14nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc5.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc5.d/S19rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc5.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc5.d/S25cups (symlink to ../init.d/cups)
• /etc/rc.d/rc5.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc5.d/S22messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc5.d/S26udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc5.d/S24avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc5.d/S12rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc5.d/S18rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc5.d/S80sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc5.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc5.d/S13irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc5.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc5.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc5.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc
• /etc/rc.d/rc6.d/K95firstboot (symlink to ../init.d/firstboot)
• /etc/rc.d/rc6.d/K74haldaemon (symlink to ../init.d/haldaemon)
• /etc/rc.d/rc6.d/K85rpcidmapd (symlink to ../init.d/rpcidmapd)
• /etc/rc.d/rc6.d/K90network (symlink to ../init.d/network)
• /etc/rc.d/rc6.d/K10saslauthd (symlink to ../init.d/saslauthd)
• /etc/rc.d/rc6.d/K01smartd (symlink to ../init.d/smartd)
• /etc/rc.d/rc6.d/K88auditd (symlink to ../init.d/auditd)
• /etc/rc.d/rc6.d/K10psacct (symlink to ../init.d/psacct)
• /etc/rc.d/rc6.d/K89portreserve (symlink to ../init.d/portreserve)
• /etc/rc.d/rc6.d/K20nfs (symlink to ../init.d/nfs)
• /etc/rc.d/rc6.d/K73ypbind (symlink to ../init.d/ypbind)
• /etc/rc.d/rc6.d/K89netplugd (symlink to ../init.d/netplugd)
• /etc/rc.d/rc6.d/K87rpcbind (symlink to ../init.d/rpcbind)
• /etc/rc.d/rc6.d/K24irda (symlink to ../init.d/irda)
• /etc/rc.d/rc6.d/K88iscsi (symlink to ../init.d/iscsi)
• /etc/rc.d/rc6.d/K01dnsmasq (symlink to ../init.d/dnsmasq)
• /etc/rc.d/rc6.d/K75ntpdate (symlink to ../init.d/ntpdate)
• /etc/rc.d/rc6.d/S00killall (symlink to ../init.d/killall)
• /etc/rc.d/rc6.d/K76openvpn (symlink to ../init.d/openvpn)
• /etc/rc.d/rc6.d/K74nscd (symlink to ../init.d/nscd)
• /etc/rc.d/rc6.d/K73winbind (symlink to ../init.d/winbind)
• /etc/rc.d/rc6.d/K84NetworkManager (symlink to ../init.d/NetworkManager)
• /etc/rc.d/rc6.d/K60crond (symlink to ../init.d/crond)
• /etc/rc.d/rc6.d/K05atd (symlink to ../init.d/atd)
• /etc/rc.d/rc6.d/K88rsyslog (symlink to ../init.d/rsyslog)
• /etc/rc.d/rc6.d/K92iptables (symlink to ../init.d/iptables)
• /etc/rc.d/rc6.d/K99cpuspeed (symlink to ../init.d/cpuspeed)
• /etc/rc.d/rc6.d/K01livesys-late (symlink to ../init.d/livesys-late)
• /etc/rc.d/rc6.d/K84wpa_supplicant (symlink to ../init.d/wpa_supplicant)
• /etc/rc.d/rc6.d/S01reboot (symlink to ../init.d/halt)
• /etc/rc.d/rc6.d/K69rpcsvcgssd (symlink to ../init.d/rpcsvcgssd)
• /etc/rc.d/rc6.d/K85rpcgssd (symlink to ../init.d/rpcgssd)
• /etc/rc.d/rc6.d/K92ip6tables (symlink to ../init.d/ip6tables)
• /etc/rc.d/rc6.d/K86nfslock (symlink to ../init.d/nfslock)
• /etc/rc.d/rc6.d/K89rdisc (symlink to ../init.d/rdisc)
• /etc/rc.d/rc6.d/K87restorecond (symlink to ../init.d/restorecond)
• /etc/rc.d/rc6.d/K99livesys (symlink to ../init.d/livesys)
• /etc/rc.d/rc6.d/K10cups (symlink to ../init.d/cups)
• /etc/rc.d/rc6.d/K25sshd (symlink to ../init.d/sshd)
• /etc/rc.d/rc6.d/K85messagebus (symlink to ../init.d/messagebus)
• /etc/rc.d/rc6.d/K30sendmail (symlink to ../init.d/sendmail)
• /etc/rc.d/rc6.d/K85mdmonitor (symlink to ../init.d/mdmonitor)
• /etc/rc.d/rc6.d/K87irqbalance (symlink to ../init.d/irqbalance)
• /etc/rc.d/rc6.d/K15httpd (symlink to ../init.d/httpd)
• /etc/rc.d/rc6.d/K50netconsole (symlink to ../init.d/netconsole)
• /etc/rc.d/rc6.d/K75netfs (symlink to ../init.d/netfs)
• /etc/rc.d/rc6.d/K83bluetooth (symlink to ../init.d/bluetooth)
• /etc/rc.d/rc6.d/K74lm_sensors (symlink to ../init.d/lm_sensors)
• /etc/rc.d/rc6.d/K02avahi-daemon (symlink to ../init.d/avahi-daemon)
• /etc/rc.d/rc6.d/K74ntpd (symlink to ../init.d/ntpd)
• /etc/rc.d/rc6.d/K87multipathd (symlink to ../init.d/multipathd)
• /etc/rc.d/rc6.d/K75udev-post (symlink to ../init.d/udev-post)
• /etc/rc.d/rc6.d/K01smolt (symlink to ../init.d/smolt)
• /etc/rc.d/rc6.d/K89iscsid (symlink to ../init.d/iscsid)

Commands Executed:

• /sbin/chkconfig --list
• /sbin/runlevel

Plugin system

Files copied:

• /proc/sys/kernel/sched_min_granularity_ns
• /proc/sys/kernel/sched_latency_ns
• /proc/sys/kernel/sched_wakeup_granularity_ns
• /proc/sys/kernel/sched_shares_ratelimit
• /proc/sys/kernel/sched_shares_thresh
• /proc/sys/kernel/sched_child_runs_first
• /proc/sys/kernel/sched_features
• /proc/sys/kernel/sched_migration_cost
• /proc/sys/kernel/sched_nr_migrate
• /proc/sys/kernel/sched_rt_period_us
• /proc/sys/kernel/sched_rt_runtime_us
• /proc/sys/kernel/sched_compat_yield
• /proc/sys/kernel/panic
• /proc/sys/kernel/exec-shield
• /proc/sys/kernel/core_uses_pid
• /proc/sys/kernel/core_pattern
• /etc/sysctl.conf
• /etc/cron.deny
• /etc/cron.hourly/0anacron
• /etc/cron.weekly/makewhatis.cron
• /etc/cron.weekly/raid-check
• /etc/crontab
• /etc/cron.d/0hourly
• /etc/cron.d/smolt
• /etc/cron.monthly/readahead-monthly.cron
• /etc/cron.daily/readahead.cron
• /etc/cron.daily/0logwatch (symlink to ../..//usr/share/logwatch/scripts/logwatch.pl)
• /etc/cron.daily/logrotate
• /etc/cron.daily/tmpwatch
• /etc/cron.daily/rpm
• /etc/cron.daily/makewhatis.cron
• /etc/cron.daily/prelink
• /etc/cron.daily/cups
• /etc/cron.daily/mlocate.cron
• /etc/ntp.conf
• /etc/ntp/step-tickers
• /etc/ntp/ntpservers

Plugin x11

Files copied:

• /etc/X11/Xmodmap
• /etc/X11/xinit/Xsession
• /etc/X11/xinit/xinitrc
• /etc/X11/xinit/xinitrc-common
• /etc/X11/xinit/xinitrc.d/xdg-user-dirs.sh
• /etc/X11/xinit/xinitrc.d/localuser.sh
• /etc/X11/xinit/xinitrc.d/00-start-message-bus.sh
• /etc/X11/xinit/xinitrc.d/zz-liveinst.sh
• /etc/X11/xinit/xinitrc.d/50-xinput.sh
• /etc/X11/xinit/Xclients
• /var/log/Xorg.0.log
• /etc/gdm/gdm.schemas
• /etc/gdm/PreSession/Default
• /etc/gdm/Xsession (symlink to ../X11/xinit/Xsession)
• /etc/gdm/Init/Default
• /etc/gdm/PostLogin/Default.sample
• /etc/gdm/PostSession/Default
• /etc/gdm/custom.conf

Commands Executed:

• /bin/dmesg | grep -e 'agpgart.'

Plugin yum

Files copied:

• /etc/yum/pluginconf.d/blacklist.conf
• /etc/yum/pluginconf.d/refresh-packagekit.conf
• /etc/yum/pluginconf.d/whiteout.conf
• /etc/yum.repos.d/fedora-updates.repo
• /etc/yum.repos.d/fedora.repo
• /etc/yum.repos.d/fedora-updates-testing.repo
• /etc/yum.repos.d/fedora-rawhide.repo
• /etc/yum.conf

Plugin rpm

Commands Executed:

• /bin/rpm -qa --qf="%{NAME}-%{VERSION}-%{RELEASE}-%{ARCH}~~%{INSTALLTIME:date} "|/bin/awk -F ~~ '{printf "%-60s%s\n",$1,$2}'
• /bin/rpm -Va