Both of my F14 systems had a file, /dev/ull, created during updates run
today. Does anyone else have /dev/ull? (note, not "null" but "ull".)
OSSEC got very excited about it.
Received From: mooch->rootcheck
Rule: 510 fired (level 7) -> "Host-based anomaly detection event
(rootcheck)."
Portion of the log(s):
File '/dev/ull' present on /dev. Possible hidden file.
--
-- Steve