rkhunter warnings
Timothy Alberts
talberts at msiscales.com
Thu Oct 12 15:10:43 UTC 2006
On Thu, 2006-10-12 at 19:10 +0530, Vikram Goyal wrote:
> Hello,
>
> I'm using FC5 and recently I started getting warnings from rkhunter cron
> check. I manually also updated the hashes with same results.
>
> What may be the reason??? Any ideas...Anything to worry...
>
> * System tools
> Info: prelinked files found
> Performing 'known good' check...
> /bin/cat [ BAD ]
> /bin/chmod [ BAD ]
> /bin/chown [ BAD ]
> /bin/date [ BAD ]
> /bin/dmesg [ BAD ]
> /bin/env [ BAD ]
> /bin/grep [ BAD ]
> /bin/kill [ BAD ]
> /bin/login [ BAD ]
> <snip>
> /usr/bin/whoami [ BAD ]
> --------------------------------------------------------------------------------
> Rootkit Hunter found some bad or unknown hashes. This can be happen due replaced
> binaries or updated packages (which give other hashes). Be sure your hashes are
> fully updated (rkhunter --update). If you're in doubt about these hashes, contact
> the author (fill in the contact form).
> --------------------------------------------------------------------------------
> <snip>
I get these too, but only on one of the machines?
More information about the fedora-list
mailing list