On Tue, Dec 1, 2009 at 8:08 AM, Mache <[email protected]> wrote:
> Hello,
>
> [disclaimer: nu am mai atins un redhat de 5 ani]
>
> vreau sa pun chkrootkit pe un rhel4 remote. yum install chkrootkit isi
> face treaba si il pune de la dag:
>
> Name        : chkrootkit                   Relocations: (not relocatable)
> Version     : 0.47                              Vendor: Dag Apt Repository, 
> http://dag.wieers.com/apt/
> Release     : 1.el4.rf                      Build Date: Sun Jan 21 20:13:03 
> 2007
> Install Date: Mon Nov 30 22:51:18 2009      Build Host: 
> lisse.leuven.wieers.com
> Group       : Applications/System           Source RPM: 
> chkrootkit-0.47-1.el4.rf.src.rpm
> Size        : 547296                           License: BSD-like
> Signature   : DSA/SHA1, Sun Jan 21 21:11:29 2007, Key ID a20e52146b8d79e6
> Packager    : Dag Wieers <[email protected]>
> URL         : http://www.chkrootkit.org/
> Summary     : Check locally for signs of a rootkit
> Description :
> chkrootkit is a tool to locally check for signs of a rootkit.
>
> Problema apare insa la rulare:
>
> # ls -al /usr/bin/*chkro*
> lrwxrwxrwx 1 root root 22 Nov 30 22:51 /usr/bin/chkrootkit -> 
> /usr/bin/consolehelper
> lrwxrwxrwx 1 root root 20 Nov 30 22:51 /usr/bin/chkrootkitX -> 
> /usr/bin/xchkrootkit
> -rwxr-xr-x 1 root root 72 Jan 21  2007 /usr/bin/xchkrootkit
>
> # cat /usr/bin/xchkrootkit
>
> #!/bin/sh
> /usr/bin/chkrootkit
> echo "Press ENTER to exit"
> read ENDSCRIPT
>
> [r...@decorporate deco22]# chkrootkit
> bash: /usr/bin/chkrootkit: Permission denied
>
> [r...@decorporate deco22]# xchkrootkit
> /usr/bin/xchkrootkit: line 2: /usr/bin/chkrootkit: Permission denied
> Press ENTER to exit
>
> Dupa putine sapaturi am descoperit
>
> # cat /etc/security/console.apps/chkrootkit
> USER=root
> PROGRAM=/usr/lib/chkrootkit-0.47/chkrootkit.sh
> SESSION=true
>
> si ruland /usr/lib/chkrootkit-0.47/chkrootkit.sh a mers.
>
> De ce nu merge insa /usr/bin/chkrootkit? Impachetare gresita sau altceva?
>

Ca o paranteza... pe langa chkrootkit scaneaza si cu clamav.
_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui