On Fri, 2002-09-27 at 10:26, Ward William E DLDN wrote:
> Gordon, while you're right that it's PROBABLY
> ORBit (an Open Source CORBA implementation),
> it seems to me whenever someone asks that question
> the answer can NEVER be "No". It's always got
> to be "YES!", "Possibly" or "Probably not", since
> most root kits are going to attempt to install
> some service or device which masquerades as an
> innocuous, or even required, program.
Good point. It could be a worm or trojan that creates the files, but I
haven't heard of one that behaves like ORBit yet. :)
> He might be able to check RPM to see what he has
> installed which required ORBit, and see if he's
> using those programs. In this case, perhaps
> he should do an
>
> rpm -q ORBit | xargs rpm -q --whatrequires
He'll get better results with:
rpm -q ORBit --provides | awk '{print $1}' | xargs rpm -q --whatrequires
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list
