Last night's tripwire report shows me the following:

Modified object name:  /usr/sbin/nmbd

  Property:            Expected                    Observed
  -------------        -----------                 -----------
* CRC32                Bxg0hX                      AZ+PIg
* MD5                  C7FzKDjQBMyVi/wKwNKkmI      DvNlgaBlMV2gQRCQNROrxg

What could cause this other than someone hacking it and changing the binary?
I am running an iptables-based firewall so I would be surprised if something
like this has happened.

Any suggestions?

-- 
Jake Colman                     

Principia Partners LLC                  Phone: (201) 946-0300
Harborside Financial Center               Fax: (201) 946-0320
902 Plaza Two                          E-mail: [EMAIL PROTECTED]
Jersey City, NJ 07311                  www.principiapartners.com



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to