Re: rkhunter mails to root: should I worry?

2010-03-23 Thread Oliver Schneider
> Should I worry? What are these messages I'm seeing? Especially the ones > that are reporting that the utilities sudo, dpkg-query and dpkg have > changed. How do I know these are legitimate? You should know whether the respective packages owning those files were updated by you (our the unattended

rkhunter mails to root: should I worry?

2010-03-23 Thread Dino Vliet
Dear Debian people, I'm getting rkhunter mails every day and have noticed the following contents: Warning: The file properties have changed: File: /usr/bin/dpkg Current hash: 77e5b6a35981d5d16310a1925d9566cd41d1b0fa Stored hash : 84f64e4ee0a279ae5bd20462da339e7998c1c5a2