Hello,
Recently on my new systems I have been having problems keeping rkhunter hashes updated. I get [ WARN ] on like 27 different binaries and cant get it to go away! Now I realize that I am not hacked because I just updated my server to the following -Cent OS 4.6 -Apache 2.2x -PHP 5.2x -MySQL 5.0x -Dovecot from EXIM The following I have tried from the rkhunter FAQ. The website refers to a Wiki but I cannot find one from the SF website. Please advise! [EMAIL PROTECTED] scripts]# rkhunter --propupd [ Rootkit Hunter version 1.3.0 ] File updated: searched for 148 files, found 130 [EMAIL PROTECTED] scripts]# sh hashupd.sh [INFO] Found release: "CentOS release 4.6 (Final)" [INFO] "CentOS release 4.6 (Final)" is seq nr 991 [INFO] updated hashes. [EMAIL PROTECTED] scripts]# uname -r 2.6.9-67.0.4.ELsmp [EMAIL PROTECTED] scripts]# rm /etc/prelink.cache [EMAIL PROTECTED] scripts]# sh /etc/cron.daily/prelink /etc/cron.daily/prelink: line 47: 8337 Aborted /usr/sbin/prelin k -av $PRELINK_OPTS >>/var/log/prelink.log 2>&1 [EMAIL PROTECTED] scripts]# tail -20 /var/log/prelink.log Prelinking /sbin/MAKEDEV Prelinking /usr/bin/op_help Prelinking /usr/sbin/dovecot Prelinking /usr/bin/gconf-merge-tree Prelinking /usr/bin/open /usr/sbin/prelink: Could not prelink /usr/bin/grepjar because its dependency /usr/local/lib/libz.so.1 could not be prelinked Prelinking /usr/bin/gpm-root Prelinking /sbin/mkfs.ext2 Linking /sbin/mke2fs to /sbin/mkfs.ext2 Linking /sbin/mkfs.ext3 to /sbin/mkfs.ext2 Prelinking /usr/bin/jpegtran Prelinking /usr/sbin/setup Prelinking /usr/bin/rngtest Prelinking /usr/sbin/setquota Prelinking /usr/bin/rcs Prelinking /usr/sbin/yptest Prelinking /bin/ed Prelinking /usr/bin/sesearch Prelinking /usr/bin/diff Prelink failed with return value 134 [EMAIL PROTECTED] scripts]# -- Sheldon King Systems Administrator Netriox Email: [EMAIL PROTECTED] Cell: 905-380-3155 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
