I am trying to execute a very simple shell script as an "action" from one of the default co-relation rule "Bad Logins Any User".
Also the owner of /opt/novell/sentinel/bin/actions/dumy is user/group 'novell'
echo "Hello 123 " >>/home/novell/message
The rule fires everytime I attempts a bad login but does not execute the script.
-rwx------ 1 novell novell 52 Sep 10 15:37 dumy
I have created an Action via Sentinel Control Center > Action Manager > Add, and then create an action provide the name of the script(dumy) as command( http://susepaste.org/48706646 )
Also used the action in my corelation rule (http://susepaste.org/view/51948660 ), as I already informed that rule fires everytime I attempt a bad login but script does not executed.