Re: [cobalt-users] RAQ4 Some system files change ex: ls, top, netstat, login What's wrong ?

["Fragga" <fragga@xxxxxxxxxxxx>]

Roy,

quote "

> Either you have been rooted, or just havent installed a patch of some
kind.
> ;)

"
and what patches are they ? i didnt realise there were patches out for
netstat, ps, ls, etc etc.

as far as i know i have installed all the patches which are available for a
raq4. therefore im puzzled as to how you have deduced ive been cracked ?

below is a copy of the same files Nucharin provided from my raq and their
attributes

[root /bin]# ls -la ls netstat ps login
-rwxr-xr-x   1 root     root        21672 Jun 20  2000 login
-rwxr-xr-x   1 root     root        50148 Sep  9  1999 ls
-rwxr-xr-x   1 root     root        80632 Jun 14  2000 netstat
-r-xr-xr-x   1 root     root        60080 Mar  7  2000 ps
[root /bin]# cd /usr/bin
[root bin]# ls -la du killall pstree top
-rwxr-xr-x   1 root     root        21716 Sep  9  1999 du
-rwxr-xr-x   1 root     root        10160 Feb  5  2000 killall
-rwxr-xr-x   1 root     root        11376 Feb  5  2000 pstree
-r-xr-xr-x   1 root     root        34896 Mar  7  2000 top
[root bin]# cd /sbin
[root /sbin]# ls -la syslogd
-rwxr-xr-x   1 root     root        27112 Sep 27  2000 syslogd

ive checked this with another couple of raq 4s and they all match up the
same. Could someone else whos got a raq 4 display the output from their
machine ?

id say its about a 99.9% chance that Nucharin has been rooted so im puzzled
as to why you think he hasnt been and that I have instead ! hehe.

fragga