Re: [cobalt-users] Suspicious binary

["Jeffery L. JT Vogt" <lfm@xxxxxxxxxxxxxxxxxx>]

>
>[root@www bin]# ls -l [
>lrwxrwxrwx   1 root     root            4 Dec 31  1996 [ -> test
>[root@www bin]# ls -l test
>-rwxr-xr-x   1 root     root        16412 Apr 13  1999 test

This is a normal way to handle the ksh/tcsh/bash/etc. way of handling
the shell programming conditional test "shorthand" character "[".

You'll find this in scripts like /etc/rc.d/rc3.d/S50inet:

   if [ ${NETWORKING} = "no" ]
   then
     exit 0
   fi

which is equivalent to:

   if test ${NETWORKING} = "no"
   then
     exit 0
   fi

Get the idea?

At any rate, good question (no security question is a bad question), but
in this case, no need to worry.  k?

-Arf, JT
------------------------------------------------------------------------------
  "If I knew what was going on, I'd *really* be indignant!"
                                   - Crow, "Mystery Science Theatre 3000"

 Join the UniServe Seti@Home Team: http://www.unisrv.net/computerguys/seti

Unix, Networking and ISP Consulting                             lfm@xxxxxxxxxx
http://www.unisrv.net            MSN IM: S_A_Alis@xxxxxxxxxxx      ICQ 9099687
FurryMUCK (muck.furry.org 8888): S'A'Alis    www.unisrv.net/lfm   MSTie# 21756