Re: [Rkhunter-users] Warning: The file properties have changed: File: /usr/bin/sudo
On Mon, 19 Apr 2010 18:07:21 +0200 Ralph Seward rj_sew...@hotmail.com wrote: It looks like Ubuntu updated the sudo file but I wanted to float this for any feedback from the group. Checking the Ubuntu security mailing list returns USN-928-1 (Sudo vulnerability): https://lists.ubuntu.com/archives/ubuntu-security- announce/2010-April/001080.html, so that kind of fits the bill. Since the post provides D/L links if necessary verifying package contents against a pristine package from a known good source is possible. Do I now need to run --propupd ? Try --propupd sudo. Regards, unSpawn -- -- Download Intel#174; Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
Re: [Rkhunter-users] Warning: The file properties have changed: File: /usr/bin/sudo
On 10-04-19 12:07 PM, Ralph Seward wrote: Dear All: A couple of days ago I began receiving the following warning from RKHunter from one of my servers running Ubintu: Warning: The file properties have changed: File: /usr/bin/sudo Ubuntu has recently updated the sudo package. e.g. == sudo zgrep sudo dpkg.log* dpkg.log.2.gz:2010-03-05 09:03:45 upgrade sudo 1.6.9p10-1ubuntu3.5 1.6.9p10-1ubuntu3.6 On my machines however rkhunter --propupd is run when that happens, so no intervention is required on my part. Not sure what combination of things would make that not happen for you. It's also interesting your two machines have different hashes for that file. Different releases etc? I'd find a known good one to compare to before I ran --propupd Brian signature.asc Description: OpenPGP digital signature -- Download Intel#174; Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
Re: [Rkhunter-users] Warning: The file properties have changed: File: /usr/bin/sudo
Brian: A couple of days ago I began receiving the following warning from RKHunter from one of my servers running Ubintu: Warning: The file properties have changed: File: /usr/bin/sudo Ubuntu has recently updated the sudo package. e.g. == sudo zgrep sudo dpkg.log* dpkg.log.2.gz:2010-03-05 09:03:45 upgrade sudo 1.6.9p10-1ubuntu3.5 1.6.9p10-1ubuntu3.6 On my machines however rkhunter --propupd is run when that happens, so no intervention is required on my part. Not sure what combination of things would make that not happen for you. It's also interesting your two machines have different hashes for that file. Different releases etc? I'd find a known good one to compare to before I ran --propupd The difference is probably due to the fact that one machine is a 64-bit OS whereas the other is 32-bit. Ralph Brian _ The New Busy think 9 to 5 is a cute idea. Combine multiple calendars with Hotmail. http://www.windowslive.com/campaign/thenewbusy?tile=multicalendarocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5-- Download Intel#174; Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
