[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Networking startup scripts altered - tripwire



Hi all,

Another question.

Tripwire alerted me yesterday morning that the following files checksums were altered.

The files were:
"/etc/rc.d/rc3.d"
"/etc/rc.d/rc3.d/K05cobalt-networker"
"/etc/rc.d/rc3.d/S55named"
"/etc/rc.d/rc4.d"
"/etc/rc.d/rc4.d/K05cobalt-networker"
"/etc/rc.d/rc4.d/S55named"
"/etc/rc.d/rc5.d"
"/etc/rc.d/rc5.d/K05cobalt-networker"
"/etc/rc.d/rc5.d/S55named"

(all symlinks?)

What could cause these to be altered? Haven't restarted this RaQ4 for 77 days, and no patches installed yesterday, or the day before. The only thing i might have done is restart the tivoli backup scheduler which is used for backing the server up.

Any help would be appreciated.

Thanks!

Cody Watkins