On Tue, 2007-11-27 at 06:26 -0500, Simone, John wrote:
I have been running rkhunter version 1.3.0 for a little while now.
I've updated it multiple times and fine tuned the config to eliminate
any false positives. Recently I received the following warning:
Warning: The file properties have changed:
File: /usr/bin/perl
Current inode: 1131178Stored inode: 1131183
Current size: 15164Stored size: 12552
If it was just an inode change, I wouldn't be concerned, but I haven't
run up2date or any other upgrades/patches/changes on my RHEL server in
a while. I'm scratching my head as to this sudden file change.
Should I be concerned?
It's probably due to prelinking. Although it's a little odd if you only
got one message. If you run 'rpm -Vf /usr/bin/perl' it should confirm if
the perl package still looks okay according to the RPM database.
John.
--
---
John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839
-
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/
___
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
