samhain problem

The path element: /var/log

in the filename: /var/log/samhain_log

is group writeable (GID = 0), and at least one of the group

members (UID = 5) is not in the list of trusted users.

To fix the problem, you can:

 - run ./configure again with the option --with-trusted=0,...,UID

   where UID is the UID of the untrusted user, or

 - use the option TrustedUser=UID in the configuration file.

Nothing special about this. You have to modify the configuration file to exclude these lines. RHEL5 does not use most of these filenames by default.

Only one used is: /var/log/*.[0-9]

But your system needs to run for at least a week to rotate the logfiles.