rkhunter warnings

Timothy Alberts talberts at msiscales.com
Thu Oct 12 15:10:43 UTC 2006


On Thu, 2006-10-12 at 19:10 +0530, Vikram Goyal wrote:
> Hello,
> 
> I'm using FC5 and recently I started getting warnings from rkhunter cron
> check. I manually also updated the hashes with same results.
> 
> What may be the reason??? Any ideas...Anything to worry...
> 
> * System tools
> Info: prelinked files found
> Performing 'known good' check...
>  /bin/cat  [ BAD ]
>  /bin/chmod  [ BAD ]
>  /bin/chown  [ BAD ]
>  /bin/date  [ BAD ]
>  /bin/dmesg  [ BAD ]
>  /bin/env  [ BAD ]
>  /bin/grep  [ BAD ]
>  /bin/kill  [ BAD ]
>  /bin/login  [ BAD ]
> <snip>
>  /usr/bin/whoami  [ BAD ]
> --------------------------------------------------------------------------------
> Rootkit Hunter found some bad or unknown hashes. This can be happen due replaced
> binaries or updated packages (which give other hashes). Be sure your hashes are
> fully updated (rkhunter --update). If you're in doubt about these hashes, contact
> the author (fill in the contact form).
> --------------------------------------------------------------------------------
> <snip>


I get these too, but only on one of the machines?





More information about the fedora-list mailing list