[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[cobalt-users] Chkrootkit Warning
- Subject: [cobalt-users] Chkrootkit Warning
- From: Revd Leonard Payne <leonard.payne@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Fri Jun 1 07:05:46 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
---- Excuse repeat - I sent this at 0806 uk time this morning
and as its urgent I'll send again at 22;21
----
I run chkrootkit as a cron job - piping the results back to myself by mail
-s
This morning I received the following warnings:
1. another cron job failed
/usr/bin/find: //proc/6/fd: Permission denied
/usr/bin/find: //proc/6/fd: Permission denied
/usr/bin/find: //proc/32113/fd/4: No such file or directory
Doesnt mean anything to me - Ive never seen them or touched them
2. More Urgently
at 04:02am CHKROOTKIT reports
Searching for anomalies in shell history files... Warning: `//var/tmp
//var/log/httpd
//var/spool/mail/admin
and then goes on and on and on through everything
concluding ....
//dev/stdin
//dev/stdout' is linked to another file
Has chkrootkit interuppted another task thats going on at 0402
or do I have a problem here . If it is a Haq, how on earth did they get it
Blessings and good morning !
Revd Leonard