Re: security issue?

2024-11-29 Thread Stephen Morris
On 29/11/24 10:59, Barry wrote: On 28 Nov 2024, at 22:45, Stephen Morris wrote: being /usr/bin/egrep and /usr/bin/fgrep because it has said they have been replaced by a script, is that standard Fedora? Did you check what was in the files and where they were installed from? The scripts print

Re: [closed] Re: security issue?

2024-11-29 Thread Patrick O'Callaghan
On Fri, 2024-11-29 at 20:37 +, Will McDonald wrote: > Indeed. I've jumped between RH-based and Debian-based distros a little in > the last few years. I started tracking some of the deltas here: > https://github.com/wmcdonald404/distrosetta-stone You might want to change the yum references to d

Re: [closed] Re: security issue?

2024-11-29 Thread Will McDonald
On Fri, 29 Nov 2024 at 20:01, George N. White III wrote: > On Fri, Nov 29, 2024 at 3:09 PM Will McDonald wrote: > >> On Fri, 29 Nov 2024 at 18:20, home user via users < >> users@lists.fedoraproject.org> wrote: >> There's a lot of commonality across most distros, so while something (the >> link I

Re: [closed] Re: security issue?

2024-11-29 Thread George N. White III
On Fri, Nov 29, 2024 at 3:09 PM Will McDonald wrote: > On Fri, 29 Nov 2024 at 18:20, home user via users < > users@lists.fedoraproject.org> wrote: > There's a lot of commonality across most distros, so while something (the > link I referenced, for example) was from an Ask Ubuntu branch of > Stack

Re: [closed] Re: security issue?

2024-11-29 Thread Will McDonald
On Fri, 29 Nov 2024 at 18:20, home user via users < users@lists.fedoraproject.org> wrote: > On 11/28/24 10:24 AM, home user via users wrote: > > (f-40, stand-alone workstation, gnome) > > > > A few times in the past couple of months, I've received the following > warning from "chkrootkit": > > - -

[closed] Re: security issue?

2024-11-29 Thread home user via users
On 11/28/24 10:24 AM, home user via users wrote: (f-40, stand-alone workstation, gnome) A few times in the past couple of months, I've received the following warning from "chkrootkit": - - - - - - bash.1[~]: chkrootkit ROOTDIR is `/' Checking `amd'... not found [snip] Checking `bindshell'... no

Re: security issue?

2024-11-28 Thread Will McDonald
On Thu, 28 Nov 2024 at 17:38, Jeffrey Walton wrote: > On Thu, Nov 28, 2024 at 12:25 PM home user via users > wrote: > > Checking `lkm'... You have 1 process hidden for ps command > > > > What's going on with that lkm warning? > > Do you really need us to google it for you? > And what Jeffer

Re: security issue?

2024-11-28 Thread Barry
> On 28 Nov 2024, at 22:45, Stephen Morris wrote: > > being /usr/bin/egrep and /usr/bin/fgrep because it has said they have been > replaced by a script, is that standard Fedora? Did you check what was in the files and where they were installed from? The scripts print a warning message then r

Re: security issue?

2024-11-28 Thread Patrick O'Callaghan
On Fri, 2024-11-29 at 09:45 +1100, Stephen Morris wrote: > I've run chkrootkit and it said there were no issues, but rkhunter has > reported two suspect files, being /usr/bin/egrep and /usr/bin/fgrep > because it has said they have been replaced by a script, is that > standard Fedora? fgrep and

Re: security issue?

2024-11-28 Thread Stephen Morris
On 29/11/24 04:37, Jeffrey Walton wrote: On Thu, Nov 28, 2024 at 12:25 PM home user via users wrote: (f-40, stand-alone workstation, gnome) A few times in the past couple of months, I've received the following warning from "chkrootkit": - - - - - - bash.1[~]: chkrootkit ROOTDIR is `/' Checking

Re: security issue?

2024-11-28 Thread Jeffrey Walton
On Thu, Nov 28, 2024 at 12:25 PM home user via users wrote: > > (f-40, stand-alone workstation, gnome) > > A few times in the past couple of months, I've received the following > warning from "chkrootkit": > - - - - - - > bash.1[~]: chkrootkit > ROOTDIR is `/' > Checking `amd'... not found > [snip

Re: Security issue

2018-11-06 Thread Doug
On 11/06/2018 08:49 PM, finn via users wrote: Why wouldn't you regular review your task manager, system settings etc. to confirm your machine has been not comprised ? (Here, few things which you can do to confirm there isn't a breach in your system). 1. Failed logins: /var/log/messages 2. last