Find the answer to your Linux question:
Results 1 to 2 of 2
My computer froze and I had to unplug it so I ran rkhunter and found these warnings. Does anyone know what they indicate, please? [17:31:04] /bin/uname [ OK ] [17:31:04] ...
  1. #1
    Linux Enthusiast cousinlucky's Avatar
    Join Date
    Dec 2005
    Location
    New York City
    Posts
    575

    Does anyone know what these rkhunter log files indicate?

    My computer froze and I had to unplug it so I ran rkhunter and found these warnings. Does anyone know what they indicate, please?

    [17:31:04] /bin/uname [ OK ]
    [17:31:04] /bin/which [ OK ]
    [17:31:05] Info: Found file '/bin/which': it is whitelisted for the 'script replacement' check.
    [17:31:05] /bin/dash [ Warning ]
    [17:31:05] Warning: The file properties have changed:
    [17:31:05] File: /bin/dash
    [17:31:05] Current hash: 3444de811983a5fb0c0c897a14058705e80a2744
    [17:31:05] Stored hash : 3877dcb9da20ec5f446202526144f488c8f07ce0
    [17:31:05] Current inode: 745537 Stored inode: 745496
    [17:31:05] Current file modification time: 1236603790
    [17:31:05] Stored file modification time : 1205320948
    [17:31:05] /usr/bin/awk [ OK ]
    [17:31:05] /usr/bin/basename [ OK ]
    [17:31:05] /usr/bin/chattr [ OK ]
    [17:31:05] /usr/bin/curl [ Warning ]
    [17:31:05] Warning: The file '/usr/bin/curl' exists on the system, but it is not present in the rkhunter.dat file.
    [17:31:05] /usr/bin/cut [ OK ]
    [17:31:05] /usr/bin/diff [ OK ]

    [17:31:07] /usr/bin/lsof [ OK ]
    [17:31:07] /usr/bin/mail [ Warning ]
    [17:31:07] Warning: The file '/usr/bin/mail' exists on the system, but it is not present in the rkhunter.dat file.
    [17:31:07] /usr/bin/md5sum [ OK ]
    [17:31:07] /usr/bin/mlocate [ OK ]
    [17:31:07] /usr/bin/newgrp [ OK ]
    [17:31:07] /usr/bin/passwd [ OK ]
    [17:31:07] /usr/bin/perl [ OK ]
    [17:31:07] /usr/bin/pstree [ OK ]
    [17:31:07] /usr/bin/rkhunter [ OK ]
    [17:31:08] /usr/bin/rpm [ OK ]
    [17:31:08] /usr/bin/runcon [ OK ]
    [17:31:08] /usr/bin/sha1sum [ OK ]
    [17:31:08] /usr/bin/size [ Warning ]
    [17:31:08] Warning: The file properties have changed:
    [17:31:08] File: /usr/bin/size
    [17:31:08] Current hash: 08d7d75c7c37a30cb63d1fc2ec64a7b84cdbdfb3
    [17:31:08] Stored hash : 1a8a32787be40233ed78aa86a57bf42b571c2a99
    [17:31:08] Current inode: 1607730 Stored inode: 82887
    [17:31:08] /usr/bin/sort [ OK ]
    [17:31:08] /usr/bin/stat [ OK ]
    [17:31:08] /usr/bin/strace [ OK ]
    [17:31:08] /usr/bin/strings [ Warning ]
    [17:31:08] Warning: The file properties have changed:
    [17:31:08] File: /usr/bin/strings
    [17:31:08] Current hash: 419d3331e3eb8d0ea02ba3a425cd3a9fbd9f625e
    [17:31:08] Stored hash : a142f170a01b4a94711bfd2b0c649a6b8e9d5a22
    [17:31:08] Current inode: 1607733 Stored inode: 82928
    [17:31:08] /usr/bin/sudo [ OK ]
    Linux registered user # 414321
    You Should Not Give In To Evils, But Proceed Ever More Boldly Against Them!! -from book six of Virgil's Aeneid
    http://www.paynal.com
    Everything Within The Universe Is Related; We Are All Cousins!!

  2. #2
    Super Moderator MikeTbob's Avatar
    Join Date
    Apr 2006
    Location
    Texas
    Posts
    7,145
    I'm not positive but I think this is just RKhunter scanning things and telling you that the properties have changed, it could be due to an update. Keep an eye on which files get updated so that when you run RKhunter and it tells you the properties have changed, you'll know it's ok.
    I do not respond to private messages asking for Linux help, Please keep it on the forums only.
    All new users please read this.** Forum FAQS. ** Adopt an unanswered post.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
...