| View previous topic :: View next topic |
| Author |
Message |
pharmboy
n00b
Joined: 06 Apr 2003
Posts: 17
|
 Posted: Fri Jun 20, 2003 5:57 pm Post subject: chkrootkit question |
 |
|
My output for chkrootkit contains the following:
| Code: | Searching for suspicious files and dirs, it may take a while...
/usr/lib/php/.filemap /usr/lib/php/.lock /usr/lib/.keep /usr/lib/perl5/5.8.0/i686-linux/auto/Safe/.packlist /usr/lib/perl5/5.8.0/i686-linux/auto/Test/Simple/.packlist /usr/lib/perl5/5.8.0/i686-linux/auto/Test/Harness/.packlist /usr/lib/perl5/5.8.0/i686-linux/auto/Storable/.packlist /usr/lib/perl5/5.8.0/i686-linux/auto/ExtUtils/MakeMaker/.packlist /usr/lib/perl5/5.8.0/i686-linux/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gtk/Gdk/Pixbuf/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gtk/Gdk/ImlibImage/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gtk/base/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gtk/XmHTML/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/PDL/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Net/SSLeay/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/XML/Parser/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/XML/Writer/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gimp/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Gnome/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Parse/RecDescent/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/ExtUtils/F77/.packlist /usr/lib/perl5/site_perl/5.6.1/i686-linux/auto/Foomatic/.packlist /usr/lib/perl5/site_perl/5.8.0/i686-linux/auto/DBD/mysql/.packlist /usr/lib/perl5/site_perl/5.8.0/i686-linux/auto/DBI/.packlist /usr/lib/perl5/site_perl/5.8.0/i686-linux/auto/Net/Daemon/.packlist /usr/lib/perl5/site_perl/5.8.0/i686-linux/auto/RPC/PlServer/.packlist /usr/lib/perl5/site_perl/5.8.0/i686-linux/auto/Term/ReadKey/.packlist /usr/lib/nsbrowser/plugins/.keep /usr/lib/mozilla/include/ipc/.headerlist /usr/lib/mozilla/include/enigmime/.headerlist /lib/.keep /lib/dev-state/.keep |
Is this indicative of a problem? Seems like a lot of "suspicious" files, though most are the same one (.packlist) and seem to be in my /usr/lib/perl subdirectories.
Everything else in the output looks OK.
Just wondering if I need to be concerned...thanks. |
|
| Back to top |
|
 |
slartibartfasz
Veteran
Joined: 29 Oct 2002
Posts: 1462
Location: Vienna, Austria
|
| Posted: Sat Jun 21, 2003 6:03 am Post subject: |
|
|
yes and no:
no: these files are pretty normal. .packlist belongs to CPAN, .keep files prevent accidential deletion of important directories by portage
yes: anyone who knows this can add his own .packlist or .keep....
see also here
_________________
To an engineer the glass is neither half full, nor half empty - it is just twice as big as it needs to be. |
|
| Back to top |
|
|
pharmboy
n00b
Joined: 06 Apr 2003
Posts: 17
|
| Posted: Sat Jun 21, 2003 4:19 pm Post subject: |
|
|
| Ok thanks! |
|
| Back to top |
|
|
|
Networking & Security
