Re: Worried about having been hacked

2009-07-08 Thread Frank Murphy
On 08/07/09 10:59, James Allsopp wrote: Hi, I've checked this out and that was happening, but I've just had this reported by rkhunter; snip Warning: Package manager verification has failed: File: /sbin/chkconfig Try running the command 'prelink /sbin/chkconfig' to

Re: Worried about having been hacked

2009-07-08 Thread Manuel Aróstegui
El mié, 08-07-2009 a las 10:59 +0100, James Allsopp escribió: Hi, I've checked this out and that was happening, but I've just had this reported by rkhunter; Warning: Package manager verification has failed: File: /bin/rpm Try running the command 'prelink /bin/rpm' to

Re: Worried about having been hacked

2009-07-08 Thread James Allsopp
Hi, I've checked all the files you asked me to. The following is the files from the yum whatprovides followed by that grepped on /var/log/ chkconfig-1.3.38-1.i386 Mar 26 00:53:01 Updated: chkconfig-1.3.38-1.i386 rpm-4.6.1-1.fc10.i386 Jun 10 08:34:24 Updated: rpm-4.6.1-1.fc10.i386

Re: Worried about having been hacked

2009-07-08 Thread Fernando Cassia
On Wed, Jul 8, 2009 at 8:08 AM, James Allsopp jamesaalls...@googlemail.comwrote: Hi, I've checked all the files you asked me to. This is also good reading... Intrusion Detection in Linux http://www.nic.com/~dave/SecurityAdminGuide/SecurityAdminGuide-7.html FC -- fedora-list mailing list

Re: Worried about having been hacked

2009-07-08 Thread John Horne
On Wed, 2009-07-08 at 12:08 +0100, James Allsopp wrote: Hi, I've checked all the files you asked me to. The following is the files from the yum whatprovides followed by that grepped on /var/log/ chkconfig-1.3.38-1.i386 Mar 26 00:53:01 Updated: chkconfig-1.3.38-1.i386 rpm-4.6.1-1.fc10.i386

Worried about having been hacked

2009-07-06 Thread James Allsopp
Hi, I've a Fedora core 10 system which spends a lot of the time connected directly to the internet, with a static ip. The only external ports open are 80 and 22. SSH only allows access to one non-root user via an rsa key. I'm using an IPtables script from

Re: Worried about having been hacked

2009-07-06 Thread Arthur Pemberton
On Mon, Jul 6, 2009 at 12:01 PM, James Allsoppjamesaalls...@googlemail.com wrote: Hi, I've a Fedora core 10 system which spends a lot of the time connected directly to the internet, with a static ip. The only external ports open are 80 and 22. SSH only allows access to one non-root user via an

Re: Worried about having been hacked

2009-07-06 Thread Rick Stevens
Arthur Pemberton wrote: On Mon, Jul 6, 2009 at 12:01 PM, James Allsoppjamesaalls...@googlemail.com wrote: Hi, I've a Fedora core 10 system which spends a lot of the time connected directly to the internet, with a static ip. The only external ports open are 80 and 22. SSH only allows access to