On Mon, 28 Jul 2008 14:36:34 +0200 Dimitri Yioulos <[EMAIL PROTECTED]> wrote: >This is a well-known and oft-discussed scenario. You probably >have your system set up to automatically update packages, so RKH is >reporting on the changes.
The problem is with the word "probably". You want to *make certain* that what has happened is due to legitimate causes like installation, updating or running prelink (if applicable) before you update the database. Correlating could come from system logs, reading cronjobs, any integrity checkers you run (Samhain, Aide, Osiris etc cetera), verifying package contents with trusted remote copies. regards, unSpawn --- -- Explore all of Europe's beauty! Click now for great vacation packages! http://tagline.hushmail.com/fc/Ioyw6h4ePhmFPHDIO78mrquFiOhqphNwNFjQYcZVdMLBMkzBe02jmA/ ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
