Niccolas,
I agree with John. rkhunter is your friend!
I set up all my servers to run nightly with weekly updates.
Peace,
Allan

John R Pierce wrote:
> On 02/07/11 10:06 AM, Nicolas Ross wrote:
>> I found some suspicious file in /bin and /usr/bin directories that are owned
>> by user id 122, where this machine doesn't a userid 122.
>>
> 
> oh.  get and run rkhunter.  preferably do it on read only media via 
> another system.
> 
> 
> _______________________________________________
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
> 
> 
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Reply via email to