No action specified: init, update, or check | Neither in the configuration file nor on the command line was specified whether to run in init, update, or check mode.
Severity: err  Class: ERROR

ORACLE_HOME environment variable not set | The program was started without setting the environment variable ORACLE_HOME before.
Severity: err  Class: ERROR

database name not set, using default 'samhain' | The database name was not set in the configuration file. The default value 'samhain' will be used.
Severity: err  Class: ERROR

database user not set, using default 'samhain' | The database user was not set in the configuration file. The default value 'samhain' will be used.
Severity: err  Class: ERROR

database password not set, cannot proceed | The database password was not set in the configuration file. There is no default, and database logging will be disabled.
Severity: err  Class: ERROR

Subprocess exited normally with status NN | When executing an external logging command, the command exited normally.
Severity: info  Class: ERROR

Subprocess terminated by signal NN  | When executing an external logging command, the command was terminated by a signal.
Severity: info  Class: ERROR

Subprocess stopped by signal NN, killing | When executing an external logging command, the command was stopped by a signal, and will be killed.
Severity: info  Class: ERROR

Subprocess not yet exited, killing | When executing an external logging command, the command seems to hang and will be killed
Severity: info  Class: ERROR

Waitpid returned error NN | Internal error. When executing an external logging command, the status of the subprocess could not be determined.
Severity: info  Class: ERROR

Key direction is invalid | Internal error in the cryptographic library.
Severity: err  Class: ERROR


Key material not of correct length | Internal error in the cryptographic library.
Severity: err  Class: ERROR

Key passed is not valid | Internal error in the cryptographic library.
Severity: err  Class: ERROR

Params struct passed to cipherInit invalid | Internal error in the cryptographic library.
Severity: err  Class: ERROR

Cipher in wrong state | Internal error in the cryptographic library.
Severity: err  Class: ERROR

Bad block length | Internal error in the cryptographic library.
Severity: err  Class: ERROR

Data contents are invalid | Internal error in the cryptographic library.
Severity: err  Class: ERROR

NULL input | Internal error in the server.
Severity: err  Class: ERROR

Connecting entity unknown | The IP address of the peer connecting to the server
could not be determined. 
Severity: err  Class: ERROR

Checksum mismatch | The checksum of the GnuPG executable does not match the compiled-in checksum.
Severity: err  Class: ERROR
 
Could not open pipe | Internal error while trying to execute an external programm (gpg or prelink)
Severity: err  Class: ERROR

No good signature | The PGP signature of configuration file or baseline database could not be verified.
Severity: err  Class: ERROR

No fingerprint for key | While checking PGP signature of configuration file or baseline database, the fingerprint for the signing key could not be obtained.
Severity: err  Class: ERROR

Fingerprint mismatch | While checking PGP signature of configuration file or baseline database, the fingerprint for the signing key did not match the compiled-in fingerprint (i.e. the file is signed, but with the wrong PGP key).
Severity: err  Class: ERROR

Unknown host XX | Address for host XX could not be resolved. Error in the mail module (there is no MX entry in the DNS, and the domain does not resolve to an IP address).
Severity: err  Class: ERROR

No MX record for domain XX | Domain XX has no DNS entry of type MX
Severity: debug  Class: ERROR

No valid ticket | Internal error in the prelink module.
Severity: debug  Class: ERROR

Bad argument count | Internal error in the prelink module.
Severity: err  Class: ERROR

second signed message in file | A signed configuration file contains two signed messages.
Severity: err  Class: ERROR

Config option SetSocketAllowUID not supported, use SetSocketPassword | Incorrect configuration. The OS does not support passing credentials over a UNIX doamin socket, therefore password authentication must be used, and the SetSocketPassword option must be supplied in the server configuration file.
Severity: warn  Class: ERROR

PID dir path too long | The path of the yule pid directory (where the UNIX domain socket /cfmu/yule/run/yule.sock is created) is too long. Recompile with another location for the PID directory.
Severity: err  Class: ERROR

Socket exists, trying to unlink it | The UNIX domain socket /cfmu/yule/run/yule.sock already exists. Yule will try to unlink it (aasuming it is a stale socket from a previous instance of yule).
Severity: err  Class: ERROR

Unlink failed, maybe path not trusted | Unlinking an already existing UNIX domain socket /cfmu/yule/run/yule.sock failed. One possible reason is that the path is owned or writeable by an untrusted user.
Severity: err  Class: ERROR

Bad password | An attempt was made to send a command to the server via the UNIX domain socket /cfmu/yule/run/yule.sock, but the password was not correct.
Severity: err  Class: ERROR

Bad message format | A command sent to the server via the UNIX domain socket /cfmu/yule/run/yule.sock was not correctly formatted.
Severity: err  Class: ERROR

Failed to release time slice | The SUID/SGID check was configured to release the time slice after checking a file, but the corresponding system call failed.
Severity: err  Class: ERROR

Checking for SUID programs | Informational message indicating the start of the SUID/SGID check
Severity: notice  Class: ERROR

Not TIGER_FD | Internal error in the checksum routine.
Severity: SeverityFiles  Class: ERROR

File too large | Configuration file or baseline database exceeds 2Gb
Severity: err  Class: ERROR

Error opening temporary file | The temporary file for downloading a configuration file or baseline database could not be opened. Could be due to lack of write permission for the home directory.
Severity: debug  Class: ERROR

nodename returned by uname may be truncated | The uname system call has returned a value for the nodename that exactly fills the buffer and therefore might or might not be truncated (on many OS the uname() system call is broken, as the buffer size is not sufficiently large for a domain label).
Severity: warn  Class: ERROR
 
The checksum of XX has changed since startup (YY -> ZZ) | The checksum of the executable XX has changed beween strtup and termination. XX is set with the configuration option SamhainPath to the path of the samhain executable.
Severity: info  Class: ERROR

Cannot create PID file | The PID file could not be created.
Severity: err  Class: ERROR

Cannot create lock file | A lock file (for the log file) could not be created.
Severity: err  Class: ERROR

Cannot open PID file for read | The PID file exists, but cannot be opened. Most likely an access permission problem.
Severity: err  Class: ERROR

Cannot open lock file for read | A lock file (for the log file) exists, but cannot be opened. Most likely an access permission problem.
Severity: err  Class: ERROR

Bad PID in PID file | The PID file exists, but contains something other than a numeric PID.
Severity: err  Class: ERROR

Bad PID in lock file | A lock file (for the log file) exists, but contains something other than a numeric PID.
Severity: err  Class: ERROR

Cannot read PID file | Error reading the PID file (which has already been opened for read).
Severity: err  Class: ERROR

Cannot read lock file |  Error reading a lock file (which has already been opened for read).
Severity: err  Class: ERROR

Cannot remove stale PID file, PID may be a running process | The PID in the PID file is not the one of the current process, and there is another process with this PID running. The PID file will not be replaced.
Severity: err  Class: ERROR

Cannot remove stale lock file, PID may be a running process | The PID in the lock file is not the one of the current process, and there is another process with this PID running. The lock file will not be replaced.
Severity: err  Class: ERROR


