---------- Forwarded Message ----------
Subject: [expert] Good Morning worries (security check problem)
Date: Sun, 21 Apr 2002 11:01:50 +0900
From: Gavin <[EMAIL PROTECTED]>
To: Dan Labine <[EMAIL PROTECTED]>, [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED]
Good Morning,
I did an update from a clean install (running Mandrake linux8.0) and this is
what I got back the next morning.
Security Warning: Change in Suid Root files found :
- Added suid root files : /usr/lib/squid/pam_auth
Security Warning: Changes in Suid Group files found :
- Added suid group files : /usr/lib/squid/pam_auth
- Removed suid group files : /usr/bin/gpg
Security Warning: the md5 checksum for one of your SUID files has changed,
maybe an intruder modified one of these suid binary in order to put in a
backdoor...
- Checksum changed files : /usr/bin/crontab
- Checksum changed files : /usr/bin/gpg
- Checksum changed files : /usr/bin/procmail
- Checksum changed files : /usr/bin/ssh
- Checksum changed files : /usr/bin/sudo
- Checksum changed files : /usr/libexec/pt_chown
- Checksum changed files : /usr/sbin/pppd
Question, what are some of the reasons besides the obvious (being rooted or
backdoor setup) I would get this and how do I correct this problem with
reloading the whole system AGAIN if possible. This is the Fifth time I've got
this message and I'm using Mandrake update, I thought Mandrake update
checked for these types of problems.
I live in Japan, using a dial-up connection, could this be a problem?? just
asking.
GOD BLESS YOU ALL and thank you for your help.
Sincerly,
Gavin (Fukushima, Japan)
Reg Linux user #199685
-------------------------------------------------------
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
