Buanzo, mil gracias.....Si algunos archivos mire, por ejemplo este: /lib/modules/2.6.9-1.667smp/build/.config tiene fecha de creacion del año 2004, es RW-R--R--, y su contenido es:
# Automatically generated make config: don't edit # Linux kernel version: 2.6.9-1.667smp # Tue Nov 2 14:57:06 2004 # CONFIG_X86=y CONFIG_MMU=y CONFIG_UID16=y CONFIG_GENERIC_ISA_DMA=y CONFIG_GENERIC_IOMAP=y # # Code maturity level options # CONFIG_EXPERIMENTAL=y CONFIG_CLEAN_COMPILE=y # # General setup # CONFIG_LOCALVERSION="" CONFIG_SWAP=y CONFIG_SYSVIPC=y CONFIG_POSIX_MQUEUE=y CONFIG_BSD_PROCESS_ACCT=y # CONFIG_BSD_PROCESS_ACCT_V3 is not set CONFIG_SYSCTL=y CONFIG_AUDIT=y CONFIG_AUDITSYSCALL=y CONFIG_LOG_BUF_SHIFT=17 CONFIG_HOTPLUG=y # CONFIG_IKCONFIG is not set # CONFIG_EMBEDDED is not set CONFIG_KALLSYMS=y # CONFIG_KALLSYMS_ALL is not set CONFIG_KALLSYMS_EXTRA_PASS=y CONFIG_FUTEX=y CONFIG_EPOLL=y CONFIG_IOSCHED_NOOP=y CONFIG_IOSCHED_AS=y CONFIG_IOSCHED_DEADLINE=y CONFIG_IOSCHED_CFQ=y CONFIG_CC_OPTIMIZE_FOR_SIZE=y CONFIG_SHMEM=y # CONFIG_TINY_SHMEM is not set Y no veo nada raro a mi juicio....siempre que chkrootkit tira algun warning es por algo o puede ser erroneo ??? Saludos, Alejandro ----- Original Message ----- From: "Alejandro Cabrera Obed" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Tuesday, October 04, 2005 3:42 PM Subject: chkrootkit me indica algo sospechoso > Hola, corri chkrootkit en una Linux Fedora Core 3 y me da este resultado > dudoso que a continuacion les transcribo...alguna pista, a que se puede > deber ??? Los demas chequeos me dan OK. Mil gracias desde ya. > > Searching for suspicious files and dirs, it may take a while... > /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/auto/mod_perl/.pack > list > /usr/lib/perl5/vendor_perl/5.8.5/i386-linux-thread-multi/auto/Gaim/.packlist > /usr/lib/perl5/5.8.5/i386-linux-thread-multi/.packlist > /lib/modules/2.6.9-1.667smp/build/.config > /lib/modules/2.6.9-1.667smp/build/scripts/.conmakehash.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/genksyms/.genksyms.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/genksyms/.lex.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/genksyms/.genksyms.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/genksyms/.parse.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/.pnmtologo.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/basic/.docproc.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/basic/.fixdep.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/basic/.split-include.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/kconfig/.mconf.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/kconfig/.conf.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/kconfig/.libkconfig.so.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/kconfig/.conf.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/kconfig/.zconf.tab.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.file2alias.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.empty.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.modpost.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.sumversion.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.modpost.o.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.elfconfig.h.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/mod/.mk_elfconfig.cmd > /lib/modules/2.6.9-1.667smp/build/scripts/.kallsyms.cmd > /lib/modules/2.6.9-1.667/build/.config > /lib/modules/2.6.9-1.667/build/scripts/.conmakehash.cmd > /lib/modules/2.6.9-1.667/build/scripts/genksyms/.genksyms.cmd > /lib/modules/2.6.9-1.667/build/scripts/genksyms/.lex.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/genksyms/.genksyms.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/genksyms/.parse.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/.pnmtologo.cmd > /lib/modules/2.6.9-1.667/build/scripts/basic/.docproc.cmd > /lib/modules/2.6.9-1.667/build/scripts/basic/.fixdep.cmd > /lib/modules/2.6.9-1.667/build/scripts/basic/.split-include.cmd > /lib/modules/2.6.9-1.667/build/scripts/kconfig/.mconf.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/kconfig/.conf.cmd > /lib/modules/2.6.9-1.667/build/scripts/kconfig/.libkconfig.so.cmd > /lib/modules/2.6.9-1.667/build/scripts/kconfig/.conf.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/kconfig/.zconf.tab.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.file2alias.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.empty.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.modpost.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.sumversion.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.modpost.o.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.elfconfig.h.cmd > /lib/modules/2.6.9-1.667/build/scripts/mod/.mk_elfconfig.cmd > /lib/modules/2.6.9-1.667/build/scripts/.kallsyms.cmd > -- Para desuscribirte tenés que visitar la página https://listas.linux.org.ar/mailman/listinfo/lugar-gral/ /* Publica y encontra trabajo relacionado con softlibre en http://www.usla.org.ar/modules/jobs/ */ Si tenés algún inconveniente o consulta escribí a mailto:[EMAIL PROTECTED]
