[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[sécurité / maj] Rkhunter, message inquiétant



Bonjour à tous,

Je viens de recevoir ce matin le message suivant de mon serveur :

    Warning: The O/S name or version has changed since the last run:
             Old O/S value: Debian 7.1    New value: Debian 7.2
             Because of the change(s) the file properties checks may give some false-positive results.
             You may need to re-run rkhunter with the '--propupd' option.
    Warning: WARNING! It is the users responsibility to ensure that when the '--propupd' option
             is used, all the files on their system are known to be genuine, and installed from a
             reliable source. The rkhunter '--check' option will compare the current file properties
             against previously stored values, and report if any values differ. However, rkhunter
             cannot determine what has caused the change, that is for the user to do.
    Warning: The file properties have changed:
             File: /sbin/init
             Current hash: 64d54a652c64c261742017d86599971de6e4effd
             Stored hash : 8fb700b047b7d9921ccdc55da5390f5106d6917b
             Current inode: 654107    Stored inode: 654179
             Current file modification time: 1374117056 (18-juil.-2013 05:10:56)
             Stored file modification time : 1360285189 (08-févr.-2013 01:59:49)
    Warning: The file properties have changed:
             File: /sbin/runlevel
             Current hash: bda9ae712c01ac5e4e70c615b767dab918f7444d
             Stored hash : 1377af7a0a57782163e65277e06949db2c471f89
             Current inode: 654128    Stored inode: 654178
             Current file modification time: 1374117056 (18-juil.-2013 05:10:56)
             Stored file modification time : 1360285189 (08-févr.-2013 01:59:49)
    Warning: The file properties have changed:
             File: /sbin/sulogin
             Current hash: 31abf98f5cb9eaef52666fdf24d9bc9fe00c0c7f
             Stored hash : 88c9eedf7f8c96e6f1cbc6bb90f81a7c1d169370
             Current inode: 654116    Stored inode: 657123
             Current file modification time: 1374117056 (18-juil.-2013 05:10:56)
             Stored file modification time : 1360285189 (08-févr.-2013 01:59:49)
    Warning: The file properties have changed:
             File: /usr/bin/curl
             Current hash: 9d8b0b97bc944825fa6b8328a4a566814847ba59
             Stored hash : 1f0e6a9df7caee3e2e94e0c4a29e5270d40b03b4
             Current inode: 3145528    Stored inode: 3144414
             Current file modification time: 1376624646 (16-août-2013 05:44:06)
             Stored file modification time : 1365866914 (13-avril-2013 17:28:34)
    Warning: The file properties have changed:
             File: /usr/bin/dpkg
             Current hash: 5922ad97ae2f5718f11fb94017d1bce52f4979ef
             Stored hash : 6bcc74fa350ee1f7f4d955cd9b13b28a995d2d17
             Current inode: 3145762    Stored inode: 3145442
             Current file modification time: 1380662243 (01-oct.-2013 23:17:23)
             Stored file modification time : 1363587383 (18-mars-2013 07:16:23)
    Warning: The file properties have changed:
             File: /usr/bin/dpkg-query
             Current hash: 545e50134b5e15378a6848f8158a1a3cfdd8172d
             Stored hash : f317f2e96b14f1f83e249770fd7b6ad9aefa08a9
             Current inode: 3145765    Stored inode: 3145444
             Current file modification time: 1380662243 (01-oct.-2013 23:17:23)
             Stored file modification time : 1363587383 (18-mars-2013 07:16:23)
    Warning: The file properties have changed:
             File: /usr/bin/last
             Current hash: f43914f126dcba66d163710388f44217a274b115
             Stored hash : 699eec86132ec19deb0738ea8c63cec0b18a2f71
             Current inode: 3140054    Stored inode: 3140366
             Current file modification time: 1374117056 (18-juil.-2013 05:10:56)
             Stored file modification time : 1360285189 (08-févr.-2013 01:59:49)
    Warning: The file '/usr/bin/links' exists on the system, but it is not present in the rkhunter.dat file.
    Warning: The file properties have changed:
             File: /usr/bin/perl
             Current hash: ec7ce54b700d7308ac7caf663301c0a4a8f6b4e3
             Stored hash : a774afb8e0bcdfe864365471926ee9b16a71b38a
             Current inode: 3147362    Stored inode: 3140120
             Current file modification time: 1380464042 (29-sept.-2013 16:14:02)
             Stored file modification time : 1365762326 (12-avril-2013 12:25:26)
    Warning: Found enabled inetd service: sane-port

Il a dû y avoir une mise à jour, or je n'ai rien décidé.
1) Comment avoir l'historique des mises à jour d'APT ?
2) Il n'y a rien dans le crontab pour apt ; comment savoir où sont
définies les mises à jour automatiques ?
3) Je préfèrerais que APT fasse l'update automatiquement et me signifie
quand il y a des mises à jour disponibles.
4) Voici le type de mail que je recevais avant (bien plus court) :

    Warning: The file '/usr/bin/links' exists on the system, but it is not present in the rkhunter.dat file.
    Warning: Found enabled inetd service: sane-port


Merci d'avance pour votre aide !

-- 
Adrien.


Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: