Installing packages, updating packages, removing packages. These basic operations result in lots of tripwire noise. Was the change to /usr/sbin/zic part of a legitimate update, or a super-secret-stealth attack?
At this point I wish I could md5sum every binary and library file managed by the OS and compare that to some authoritative source. Yay, Josh -- To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/aanlkti=aniqfz-1e_lw3oztw9d6p5eey1bxu3becn...@mail.gmail.com