Jobst Schmalenbach wrote:
> does anybody know which RH rpms contain the files that would
> be overwritten by rootkits/crackers/breakins?
> eg: ps,ls,netstat,top etc??
rpm -q -f myfile tells you what is the name of the rpm package that owns
the file myfile.
So you could do this
rpm -q -f /bin/ps or bette still.
rpm -q -f `which ps`
etc for the other files
> Is there a URL which would have a listing for that?
I don't know of a URL listing but you could write a short bash script to
do this.
roughly like...
for i in somelist
echo the result of rpm -q -f `which $i`
fi
Mike
--
--------------------------------------------------------------------
Michael Lake, University of Technology, Sydney
Email: [EMAIL PROTECTED] Ph: 02 9514 1724 Fx: 02 9514 1628
URL: http://www.science.uts.edu.au/~michael-lake/
Linux enthusiast, active caver and interested in anything technical.
--------------------------------------------------------------------
--
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug
