Hello After fixing my prelinking issue and getting the errors and hash file values fixed we are down to 5 errors remaining This of which I cannot fathom why rkhunter is freaking out about, yes the hash file changed, yes I ran --propupd And it still is freaking that the file has changed to a bash text file executable. The likelihood of 2 of my systems being hacked that were just updated and one system was brand new is doubtful. It is way more likely these files were updated during the OS update
Below are the errors from the rkhunter log file. [23:47:20] Warning: The command '/usr/bin/groups' has been replaced by a script: /usr/bin/groups: Bourne shell script text executable [23:47:21] Warning: The command '/usr/bin/ldd' has been replaced by a script: /usr/bin/ldd: Bourne shell script text executable [23:47:25] Warning: The command '/usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: Bourne shell script text executable [23:47:26] Warning: The command '/sbin/ifdown' has been replaced by a script: /sbin/ifdown: Bourne-Again shell script text executable [23:47:26] Warning: The command '/sbin/ifup' has been replaced by a script: /sbin/ifup: Bourne-Again shell script text executable Any ideas why the hash files will not update. I have also uninstalled and reinstalled rkhunter Suggestions? -- Sheldon King Cell: 905-380-3155 Email: [EMAIL PROTECTED] Email: [EMAIL PROTECTED] PIN: 301E3F89 PLAXO: http://www.plaxo.com/add_me?n=sheldonking Sent via webmail with RoundCube ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
