> -----Original Message----- > From: Gordon Messmer [mailto:[EMAIL PROTECTED]] > Sent: Friday, September 27, 2002 7:18 PM > To: [EMAIL PROTECTED] > Subject: RE: Is this a virus : "/tmp/orbit-<blabla>" > > > On Fri, 2002-09-27 at 10:26, Ward William E DLDN wrote: > > Gordon, while you're right that it's PROBABLY > > ORBit (an Open Source CORBA implementation), > > it seems to me whenever someone asks that question > > the answer can NEVER be "No". It's always got > > to be "YES!", "Possibly" or "Probably not", since > > most root kits are going to attempt to install > > some service or device which masquerades as an > > innocuous, or even required, program. > > Good point. It could be a worm or trojan that creates the > files, but I > haven't heard of one that behaves like ORBit yet. :) > > > He might be able to check RPM to see what he has > > installed which required ORBit, and see if he's > > using those programs. In this case, perhaps > > he should do an > > > > rpm -q ORBit | xargs rpm -q --whatrequires > > He'll get better results with: > rpm -q ORBit --provides | awk '{print $1}' | xargs rpm -q > --whatrequires
<Enter Homer Simpson mode>D'OH!</Homer Simpson mode> MUCH better solution than mine; I forgot that package!=provides. I was curious why I wasn't getting more hits, since I know that CORBA is used in Gnome. I was just going to investigate why I wasn't getting more hits when this came in. Bill Ward -- redhat-list mailing list unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe https://listman.redhat.com/mailman/listinfo/redhat-list
