I just checking whereis passwd place from, when I run this # whereis passwd passwd: /bin/passwd /usr/bin/passwd /etc/passwd.OLD /etc/passwd /usr/share/man/man1/passwd.1.gz
then I checked # rpm -qf /bin/passwd file /bin/passwd is not owned by any package # rpm -ql passwd-0.64.1-4 /etc/pam.d/passwd /usr/bin/passwd /usr/share/man/man1/passwd.1.gz so where /bin/passwd come from?? I checked using whether maybe I can get something, # string /bin/passwd but I don't found any suspicious line I attached in here, sory if too big, it just 3,5kb :) I'm using rh7.1 -- ichtus ------ Lewi Supranata .K ICQ: 50643061 Homepage : http://mercury7.petra.ac.id/~ichtus GnuPG Public Key : http://mercury7.petra.ac.id/~ichtus/ichtus-keys2
msg86799/pgp00000.pgp
Description: PGP signature
