Salut!

Am un RH 9 care astazi dimineata la verificarea cu chkrootkit-ul din cron mi-a dat
erorile astea:

/bin/echo: /lib/tls/libc.so.6: version `GLIBCO2.0' not found (required by /bin/echo)
/bin/echo: /lib/tls/libc.so.6: version `GLIBCO2.0' not found (required by /bin/echo)
/bin/echo: /lib/tls/libc.so.6: version `GLIBCO2.0' not found (required by /bin/echo)

Am vrut sa vad ce are /bin/echo si cand am verificat coreutils mi-a dat suma MD5
gresita la el:
[EMAIL PROTECTED] bin]# rpm -V coreutils
..5.....   /bin/echo

Un strace pe "/bin/echo 1" arata asha:
execve("/bin/echo", ["echo", "1"], [/* 23 vars */]) = 0
uname({sys="Linux", node="gw.sitexdesign.ro", ...}) = 0
brk(0)                                  = 0x804bda8
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=27557, ...}) = 0
old_mmap(NULL, 27557, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40016000
close(3)                                = 0
open("/lib/tls/libc.so.6", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360W\1"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1539996, ...}) = 0
old_mmap(0x42000000, 1267276, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x42000000
old_mmap(0x42130000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x130000)
= 0x42130000
old_mmap(0x42133000, 9804, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x42133000
close(3)                                = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0x4001d000
writev(2, [{"echo", 4}, {": ", 2}, {"/lib/tls/libc.so.6", 18}, {": ", 2}, {"version
`GLIBCO2.0\' not found (r"..., 48}, {"\n", 1}], 6echo: /lib/tls/libc.so.6: version
`GLIBCO2.0' not found (required by echo)
) = 75
exit_group(1)                           = ?

Dar dupa 10 minute totul s-a rezolvat: /bin/echo merge, pachetul este verificat cu
success, etc
[EMAIL PROTECTED] root]# rpm -V coreutils
[EMAIL PROTECTED] root]#

Acum verific care fisiere au fost modificate, etc, dar nu gasesc nimic suspect.

Are cineva o idee despre ce s-a intamplat ?

-- 
<mack />


--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui