Hello,

[disclaimer: nu am mai atins un redhat de 5 ani]

vreau sa pun chkrootkit pe un rhel4 remote. yum install chkrootkit isi
face treaba si il pune de la dag:

Name        : chkrootkit                   Relocations: (not relocatable)
Version     : 0.47                              Vendor: Dag Apt Repository, 
http://dag.wieers.com/apt/
Release     : 1.el4.rf                      Build Date: Sun Jan 21 20:13:03 2007
Install Date: Mon Nov 30 22:51:18 2009      Build Host: lisse.leuven.wieers.com
Group       : Applications/System           Source RPM: 
chkrootkit-0.47-1.el4.rf.src.rpm
Size        : 547296                           License: BSD-like
Signature   : DSA/SHA1, Sun Jan 21 21:11:29 2007, Key ID a20e52146b8d79e6
Packager    : Dag Wieers <[email protected]>
URL         : http://www.chkrootkit.org/
Summary     : Check locally for signs of a rootkit
Description :
chkrootkit is a tool to locally check for signs of a rootkit.

Problema apare insa la rulare:

# ls -al /usr/bin/*chkro*
lrwxrwxrwx 1 root root 22 Nov 30 22:51 /usr/bin/chkrootkit -> 
/usr/bin/consolehelper
lrwxrwxrwx 1 root root 20 Nov 30 22:51 /usr/bin/chkrootkitX -> 
/usr/bin/xchkrootkit
-rwxr-xr-x 1 root root 72 Jan 21  2007 /usr/bin/xchkrootkit

# cat /usr/bin/xchkrootkit

#!/bin/sh
/usr/bin/chkrootkit
echo "Press ENTER to exit"
read ENDSCRIPT

[r...@decorporate deco22]# chkrootkit  
bash: /usr/bin/chkrootkit: Permission denied

[r...@decorporate deco22]# xchkrootkit
/usr/bin/xchkrootkit: line 2: /usr/bin/chkrootkit: Permission denied
Press ENTER to exit

Dupa putine sapaturi am descoperit 

# cat /etc/security/console.apps/chkrootkit 
USER=root
PROGRAM=/usr/lib/chkrootkit-0.47/chkrootkit.sh
SESSION=true

si ruland /usr/lib/chkrootkit-0.47/chkrootkit.sh a mers.

De ce nu merge insa /usr/bin/chkrootkit? Impachetare gresita sau altceva?



_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui