Re: [cobalt-users] Networking startup scripts altered - tripwire

["Rick Ewart" <cobalt@xxxxxxxxx>]

If I call correctly, I saw these kick in when I fired up my ASP admin server
(or added ASP to a site). Cannot really remember which, but it seemed
triggered by that.... Any chance you did some thing like that?

HTH...
Rick
----- Original Message -----
From: "Cody Watkins" <codyw@xxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Saturday, June 22, 2002 1:17 PM
Subject: [cobalt-users] Networking startup scripts altered - tripwire


> Hi all,
>
> Another question.
>
> Tripwire alerted me yesterday morning that the following files checksums
> were altered.
>
> The files were:
> "/etc/rc.d/rc3.d"
> "/etc/rc.d/rc3.d/K05cobalt-networker"
> "/etc/rc.d/rc3.d/S55named"
> "/etc/rc.d/rc4.d"
> "/etc/rc.d/rc4.d/K05cobalt-networker"
> "/etc/rc.d/rc4.d/S55named"
> "/etc/rc.d/rc5.d"
> "/etc/rc.d/rc5.d/K05cobalt-networker"
> "/etc/rc.d/rc5.d/S55named"
>
> (all symlinks?)
>
> What could cause these to be altered? Haven't restarted this RaQ4 for 77
> days, and no patches installed yesterday, or the day before. The only
thing
> i might have done is restart the tivoli backup scheduler which is used for
> backing the server up.
>
> Any help would be appreciated.
>
> Thanks!
>
> Cody Watkins
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>