On Tue, 2011-12-27 at 15:40 -0500, Tim Evans wrote: > On 12/27/2011 03:09 PM, Michael Schwendt wrote: > > On Tue, 27 Dec 2011 14:00:29 -0500, TE (Tim) wrote: > > > >> (Actually, I also run chkrootkit daily, also out of /etc/cron.daily; it, > >> too, suddenly gave me a batch of checksum errors on executables.) > > > > chkrootkit doesn't calculate any checksums for executables. > > Probably you refer to rkhunter instead. > > Right, rkhunter is what I meant. > If you are running a recent rkhunter version (probably anything from 1.3.2 or so) then it will use the prelink command itself to calculate checksums. As such the false-positives from rkhunter resulting from prelink running should be very small at worst. However, changes in executable dependencies caused by prelinking can occasionally throw it a wobbly :-)
John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 _______________________________________________ rhelv5-list mailing list rhelv5-list@redhat.com https://www.redhat.com/mailman/listinfo/rhelv5-list
