RE: [cobalt-users] httpd not working on Raq4

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 16 Jul 2002, Roger Lewis wrote:

> I force installed all the rpms from RaQ4-All-Security-2.0.1-15417.pkg.
>
> This includes:
> rpm -i --force apache-1.3.20-RaQ4_1C3.i386.rpm
> rpm -i --force apache-admsrv-1.3.20-RaQ4_1C3.i386.rpm
> rpm -i --force apache-devel-1.3.20-RaQ4_1C3.i386.rpm
> rpm -i --force apache-mod_perl-1.3.20-RaQ4_1C3.i386.rpm
> rpm -i --force apache-openssl-1.3.20-RaQ4_1C3.i386.rpm
>
> Maybe I should do it again?
>
> Hacked?  Is there an easier way to find out.  I took a look at the
> chkrootkit web site, and I think that's way beyond my capabilities.  The
> subject of rootkits looks interesting though.
>
> If I have to restore, what's a cmu save?
>
chkrootkit is a very easy install, just follow the instructions after you
untar the tarball.
or from a root shell (this is 0.35-1 there is a 0.36 out)
wget ftp://ftp.raqware.com/pub/RPMS/i386/chkrootkit-0.35-1.i386.rpm
rpm -Uvh chkrootkit-0.35-1.i386.rpm
cd chkrootkit-0.35-1
chkrootkit


get the RaQ4-All-CMU-2.27 pkg and install it
http://ftp.cobalt.sun.com/pub/packages/cmu/RaQ4-All-CMU-2.27.pkg
then run cmuExport
then ftp /home/cmu/www.domain.tld
to another location.

--
Gerald Waugh