[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Chkrootkit message
- Subject: Re: [cobalt-users] Chkrootkit message
- From: Parker Morse <morse@xxxxxxxxxxx>
- Date: Tue Mar 18 06:08:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
On Tuesday, March 18, 2003, at 07:32 AM, Rudolf Kliemstein wrote:
Does this mean anything? Chkrootkit on a RAQ3. All other Test were
negative
Searching for suspicious files and dirs, it may take a while...
/usr/lib/perl5/5.00503/i386-linux/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/mod_perl/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/MD5/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Quota/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/XML/Parser/.packlist
/usr/lib/perl5/site_perl/5.005/i386-linux/auto/Devel/Symdump/.packlist
I get these daily on our Qube. They're files created during the
installation of Perl modules. Anyway, they're harmless unless you start
seeing extra ones for modules you didn't install.
See <http://list.cobalt.com/pipermail/cobalt-
users/2002-November/081659.html>, the post where I learned this, which you
get by searching the fine archives for "chkrootkit .packlist".
pjm