RH 9 question: /var/lock/subsys and /var/log/ksyms.N ?

From: Bob (keepsimple_at_msn.com)
Date: 11/21/03 

Date: 20 Nov 2003 19:13:17 -0800

Hi all,

Hope this is right place to ask my question:

I installed Tripwire on one Redhat 9 box. Yesterday the tripwire
reported modifications on /var/lock/subsys/ files and /var/log/ksyms.N
files as attached.

I wonder what's exact function of those files and what's the most
possible reason for the modification? (I guess someone may did
interactive startup and rebooted the box, but not sure) I used google
to search those file names, but no good page describing them. Thanks.

-------------------------------------------------------------------------------
# Section: Unix File System
-------------------------------------------------------------------------------

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/log)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/log/filesupd.log"
"/var/log/filesupd.log.OLD"
"/var/log/ksyms.0"
"/var/log/ksyms.1"
"/var/log/ksyms.2"
"/var/log/ksyms.3"
"/var/log/ksyms.4"
"/var/log/ksyms.5"
"/var/log/ksyms.6"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys/iptables)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/iptables"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys/keytable)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/keytable"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys/network)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/network"

-------------------------------------------------------------------------------
Rule Name: System boot changes (/var/lock/subsys/syslog)
Severity Level: 100
-------------------------------------------------------------------------------

Modified:
"/var/lock/subsys/syslog"