Hello,
we've been running rookit for sometime, and got this in our report this
morning,
and was wondering if this is something to be concerned with or not
===
/usr/sbin/prelink: /bin/more: at least one of file's dependencies has changed
After reading through the FAQ's, found and corrected the problem :) Had to
resync the prelink as outlined in the FAQ's.
Mike
- Original Message -
From: Mike Blezien [EMAIL PROTECTED]
To: rkhunter-users@lists.sourceforge.net
Sent: Saturday, January 13, 2007 6:51 AM
Subject:
On Sat, 2007-01-13 at 07:27 -0600, Mike Blezien wrote:
After reading through the FAQ's, found and corrected the problem :) Had to
resync the prelink as outlined in the FAQ's.
Hmm, we need to go through the FAQ again. Prelinking is no verification
of a file's integrity. As such I would run
Hello John,
after running the following:
-
$ rpm -Vf /bin/more
# OUTPUT
.M../bin/mount
.M../bin/umount
.M../usr/bin/chfn
.M../usr/bin/chsh
.M../usr/bin/newgrp
.M../usr/bin/write
-
so I assume all is
here is the output:
-rwxr-xr-x 1 root root 84232 May 24 2006 /bin/mount*
-rwxr-xr-x 1 root root 54412 May 24 2006 /bin/umount*
-rwx--x--x 1 root root 17708 May 24 2006 /usr/bin/chfn*
-rwx--x--x 1 root root 18392 May 24 2006 /usr/bin/chsh*
-rwx--x--x 1 root root 7700 May 24 2006
On Sat, 2007-01-13 at 11:10 -0600, Mike Blezien wrote:
here is the output:
-rwxr-xr-x 1 root root 84232 May 24 2006 /bin/mount*
-rwxr-xr-x 1 root root 54412 May 24 2006 /bin/umount*
-rwx--x--x 1 root root 17708 May 24 2006 /usr/bin/chfn*
-rwx--x--x 1 root root 18392 May 24 2006
On Sat, 2007-01-13 at 11:24 -0600, Mike Blezien wrote:
Ok, I see that know. We do run this on a Cpanel/WebHost Mgr system. Not sure
that would make a difference.
This is the problem - why have they changed? Neither me nor RKH can
answer that. Perhaps other files have changed as well (you
On Sat, 2007-01-13 at 17:04 +, John Horne wrote:
On Sat, 2007-01-13 at 10:38 -0600, Mike Blezien wrote:
Hello John,
after running the following:
-
$ rpm -Vf /bin/more
# OUTPUT
.M../bin/mount
.M../bin/umount
.M../usr/bin/chfn
I'm wondering if anyone else has seen this problem, or has a fix.
I get aBAD checksum for 'wget', even after running 'rkhunter --update'.
However, if I uninstall wget and rkhunter( yum), then reinstall both,
it's ok for a day, then the next day it's bad again. I seem to have a
gremlin.
I'm
