When in doubt: rpm -ql /usr/bin/lbp660 HTH, Bill
> -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] > Sent: Friday, September 24, 2004 8:49 AM > To: [EMAIL PROTECTED] > Subject: RE: [newbie] Strange diff check ? > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Derek Jennings > > Sent: Friday, September 24, 2004 4:21 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [newbie] Strange diff check ? > > > > On Friday 24 September 2004 05:25, Dan Gordon wrote: > > > I got this tonight when the nightly security check was done. > > > > > > Security Warning: the md5 checksum for one of your SUID files has > > > changed, > > > maybe an intruder modified one of these suid binary > > in order to > > > put in a backdoor... > > > - Checksum changed file : /usr/bin/lbp660 > > > > > > I looked at the file it looks like an unknown file, the general > > > proterties says its an unknown file type but permisions says it is > > > executable and ownership is user root and group system. > > > > > > Maybe its nothing but it kinda got the hair up on the back > > of my neck. > > > Anyone seen this before ? > > > > > > Regards, > > > Dan Gordon > > > > Did you just upgrade your printer-filters package? > > That file is a Canon printer driver. > > Not an obvious target for a compromise :-) > > > > derek > > > > Yes I did and it is a canon printer I have, Thanks Derek the hair on > the back of the neck is now down. There were several bug and security > updates and printer filters and test pages were among them. Thanks > again :-) > > Regards, > Dan Gordon > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.768 / Virus Database: 515 - Release Date: 9/22/2004 > > > >
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
