HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

Table A-16 World-Writable File Created Alert Properties (continued)
DescriptionAlert Value/FormatAlert Field
Type
Alert FieldResponse
Program
Argument
Detailed alert descriptionUser with uid <uid>
<performed action on> the
file ><full pathname>
(type=<type>, inode=<inode>,
device<device) when
executing <program>>
(type=<type>, inode=<inode>,
device=<device>), invoked as
follows: <argv[0]>
<argv[1]>..., as process with
pid <pid> and ppid <ppid>
and running with effective
uid=<euid> and with
effective gid=<egid>.where
<performed action on> is set
to one of the following:
• created the
world-writable file
• created the
world-writable directory
• created the
world-writable character
special file
• created the
world-writable block
special file
StringDetailsargv[8]
Creation of World-Writable File Template 173