On Thu, 2005-06-16 at 16:25 -0500, David Crotty wrote:
> My nightly diff check e-mail on a test box I am running (10.1) contained
> this snippet of info:
> 
> Security Warning: the md5 checksum for one of your SUID files has changed,
>       maybe an intruder modified one of these suid binary in order to put
> in a backdoor...
>               - Checksum changed file : /usr/X11R6/bin/Xwrapper
> 
> Now, should I run round like a headless chicken and unplug all electrical
> appliances, or could it be generated by installing some other package? I'm
> trying to remember what I installed yesterday before this message and the
> only thing that springs to mind is TightVNC (which I can't get working, but
> that's a different matter). Backdoor always makes me giggle ;).
> 
> Regards, 
> David Crotty 

Dang. Ya found me out! :)

I would tend to reckon that you've updated something to do with XOrg -
check all system log files and your urpmi logs as well. Shouldn't be a
worry really.

--
YankDownUnder aka stephen kuhn
#mandriva channel op - irc.freenode.net
Mandriva Official IRC Support
-----------------------------------------------
Registered Linux User # 267497
-----------------------------------------------
We as humans tend to make pointless demands of our universe, asking
meaningless questions. Too often we make such queries after developing
an expertise within a frame of reference which has little or no
relationship to the context in which the question is asked. -- Zensunni
Observation


____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Reply via email to