On Tue, 2007-11-27 at 06:26 -0500, Simone, John wrote: > I have been running rkhunter version 1.3.0 for a little while now. > I've updated it multiple times and fine tuned the config to eliminate > any false positives. Recently I received the following warning: > > Warning: The file properties have changed: > File: /usr/bin/perl > Current inode: 1131178 Stored inode: 1131183 > Current size: 15164 Stored size: 12552 > > If it was just an inode change, I wouldn't be concerned, but I haven't > run up2date or any other upgrades/patches/changes on my RHEL server in > a while. I'm scratching my head as to this sudden file change. > Should I be concerned? > It's probably due to prelinking. Although it's a little odd if you only got one message. If you run 'rpm -Vf /usr/bin/perl' it should confirm if the perl package still looks okay according to the RPM database.
John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
