/dev/ull

[Steven Stern]

Both of my F14 systems had a file, /dev/ull, created during updates run
today. Does anyone else have /dev/ull?  (note, not "null" but "ull".)

OSSEC got very excited about it.

Received From: mooch->rootcheck
Rule: 510 fired (level 7) -> "Host-based anomaly detection event (rootcheck)."
Portion of the log(s):

File '/dev/ull' present on /dev. Possible hidden file.



-- 
-- Steve