tripwire reports major changes -- gcc or selinux or ...
Michael Schwendt
mschwendt.tmp0501.nospam at arcor.de
Tue Jul 12 08:46:20 UTC 2005
On Mon, 11 Jul 2005 17:34:16 -0700, Marcin Struzak wrote:
> I am running FC3 with tripwire-2.3.1-20.fdr.1.1 (RPM), and all of a sudden, after months of successful "quite" or almost quiet bahvior, my nightly check reports over 6500 changes. This is very unusual for an "overnight" situation, and so I am trying to figure out what caused it.
>
Prelinking can result in such changes (verify some key files with "rpm -V"
or even "rpm -Va"). But first of all, you should update your tripwire
package to FC3's. It's tripwire-2.3.1-21 in Fedora Extras. Your one is
for FC1.
--
Michael Schwendt <mschwendt at users.sf.net>
Fedora Core release 5 (Development) - Linux 2.6.12-1.1426_FC5
loadavg: 1.05 1.16 1.28
More information about the fedora-list
mailing list