Hello,I have several machines running CentOS 4.4 that have rkhunter 1.2.9 installed. When I run an rkhunter check I get bad hashes for /bin/ kill and /usr/bin/find.
These files belong to the util-linux-2.12a-16.EL4.20 and findutils-4.1.20-7.el4.3 packages respectively. The hashes were fine when these machines still ran CentOS 4.3 and rpm -V says these packages are installed just fine. I'm pretty confident that these files are ok as the update to CentOS 4.4 made these files go "bad" on all CentOS machines simultaneously.
How do I report the hashes for these files? Do I just run md5sum on them and mail the hashes to this list?
I also I have one Fedora Core 2 machine left (which soon will be replaced by a CentOS server) on which rkhunter reports five bad hashes. I've have installed the latest security updates from the Fedora Legacy Project on this machine and apparently rkhunter doesn't know these updates, because when I downgrade to the latest non-Fedora Legacy versions the hashes are ok. Upgrading to the Fedora Legacy versions makes rkhunter think they're bad again. I'd like to report the hashes for these files as well.
Thanks in advance, Nils Breunese.
PGP.sig
Description: Dit deel van het bericht is digitaal ondertekend
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
