Suspicious File Error emails
I installed Aegir yesterday on AWS. It's my first time and I am excited to use it. Now I am receiving emails every few minutes with the subject "Suspicious File Error". Any help would be greatly appreciated.
Here are the errors:
--------[Email Error 1]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/site/hosting_site.api.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 2]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/quota/hosting_quota.api.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 3]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/example/index.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 4]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/task/hosting_task.api.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 5]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/server/hosting_server.api.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 6]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/themes/eldir/page.tpl.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 7]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/themes/eldir/template.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
--------[Email Error 8]--------------
Time: Wed Oct 31 16:01:26 2012 +0000 File: /tmp/drush_make_tmp_1351672023_5090e0d7de10f/build/profiles/hostmaster/modules/hosting/hosting.api.php Reason: Script, file extension Owner: aegir:aegir (107:111) Action: No action taken
Once again, thanks for any help!
Mike
#1
Did you use the barracuda script? This script installs the csf/lfd script which is aa security monitoring utility that monitors for suspicious activity and emails you. II get these messages when running platforms using Friday make which leaves files in /tmp.
If you didn't run drush make either manually or via platform verify then you may want to check your access logs. HTH, JamieT
#2
Thanks Jamie,
I did use the barracuda script. Once those files were removed from the /tmp folder I stopped getting the emails.
Thanks for the help. I really appreciate it.
Mike