[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Suspicious binary



> > Found the following in /usr/bin
> > [root@www bin]# ls -l [
> > lrwxrwxrwx   1 root     root            4 Dec 31  1996 [ -> test
> > [root@www bin]# ls -l test
> > -rwxr-xr-x   1 root     root        16412 Apr 13  1999 test
> > 
> > a 'strings test' revealed the following...
> [massive snip]
> > Question:    is this normal?
> 
> Yes, strange as it looks, it is :)
> 
> help test
> 
> it's the left half if the shell test command often used as something like
> 
> if [ somthing ]  
> 
> so it's a program named '['
> 
> Cute huh?
> 
> (Given the timestamp it's probably the original, there should be md5sum
> for it like everything else installed via rpm tho)
> 
> gsh

Thanks Jeff and gsh, I can sleep now :-)

- Zahid