Re: [cobalt-users] [RaQ 4] chkrootkit pkg fixed

["Richard Donahue" <sales@xxxxxxxxxxxxx>]

----- Original Message -----
From: "Bruce Timberlake" <bruce@xxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Cc: <cobaltfacts@xxxxxxxxxxxxxxxxxxxx>
Sent: Saturday, February 22, 2003 10:12 PM
Subject: [cobalt-users] [RaQ 4] chkrootkit pkg fixed


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Doh. I'm a bonehead.  I didn't put all of the binaries for the various
> chkrootkit tools into my PKG.  Just the chkrootkit binary itself.
> Thus the error messages some of you were reporting when the cron job
> was running and reporting back the status.
>
> That's been fixed now.  The "new" PKG at cobaltfaqs.com has the
> following executables in it, all installed to /usr/local/sbin:
>
> check_wtmpx
> chkdirs
> chklastlog
> chkproc
> chkrootkit
> chkwtmp
> ifpromisc
> strings
>
> Remove the old one via the /var/lib/cobalt/uninstallers script, then
> install the "new" version...
>
> Sorry about that!
>

Any chance that the old one would cause my Mailscanner to stop working? I
just realized today that my Mailscanner wasn't working. It appeared to be
running, but I wasn't receiving the "X-MailScanner: Found to be clean"
message in my e-mails. Checking back into the log I found that Mailscanner
stopped on or about the same day I installed your first chkrootkit pkg.

Rich
EBS