Re: [cobalt-users] Suspicious binary

[flash22@xxxxxxx]

On Sat, 17 Feb 2001, Zahid N. Sindhu wrote:

> Found the following in /usr/bin
> [root@www bin]# ls -l [
> lrwxrwxrwx   1 root     root            4 Dec 31  1996 [ -> test
> [root@www bin]# ls -l test
> -rwxr-xr-x   1 root     root        16412 Apr 13  1999 test
> 
> a 'strings test' revealed the following...
[massive snip]
> Question:    is this normal?

Yes, strange as it looks, it is :)

help test

it's the left half if the shell test command often used as something like

if [ somthing ]  

so it's a program named '['

Cute huh?

(Given the timestamp it's probably the original, there should be md5sum
for it like everything else installed via rpm tho)

gsh