update problem
I just did my semi-frequent update of my system. Because of a hardware
problem, I currently rely upon floppies to do all of my file transfers
(the affected system has not connected to another system since 5 years
or so), so I can only do a large transfer every couple of weeks or so.
Before I could install the large packages, I encountered some
difficulties:
- every time I start up the system, fsck tries to run on root file
system, which is mounted
- /dev/hda2 (/usr) and /dev/hda7 (/var) never unmount cleanly
- xdm is "not" running while top reports it as running, and it looks and
functions like it is running
- ps catches Signal 11 every time I try to use it, and while shutting
down
- chkrootkit reports:
[...]
Checking `lkm'...
Signal 11 caught by ps (procps version 2.0.7).
Please send bug reports to <acahalan@cs.uml.edu>
You have 21 process hidden for ps command
Warning: Possible LKM Trojan installed
[...]
- pcmcia never starts
- nothing goes to xconsole anymore
- root's path statement is ignored
umount: /dev/hda2: not mounted
umount: /usr: Illegal seek
umount2: Device or resource busy
umount: /var: device is busy
done.
The list of packages that have been updated and newly installed is
below. Does anyone have _any_ idea (other than downgrading these
packages or reinstalling my entire system) on how to deal with this? At
the moment, I am most concerned about the problems with my root account,
mount, ps, and the output from chkrootkit. For some reason, I have a
sneaking suspicion that there is some connection between them.
parted_1.4.24-1
tiger_2.2.4-19
john_1.6-17
acct_6.3.5-30
bastille_1.2.0-6
debsums_2.0.1
aide_0.7-11
integrit_2.03.02-1
harden-tools_0.0.12
harden-servers_0.0.12
harden-localflaws_0.0.12
harden-environment_0.0.12
harden-doc_0.0.12
update_2.11-4_i386.deb
tasksel_1.15_i386.deb
tar_1.13.25-2_i386.deb
sysvinit_2.84-2_i386.deb
syslinux_1.66-1_i386.deb
sysklogd_1.4.1-10_i386.deb
slang1_1.4.4-7_i386.deb
pcmcia-cs_3.1.31-7_i386.deb
mount_2.11n-4_i386.deb
modutils_2.4.13-3_i386.deb
makedev_2.3.1-57_all.deb
libpam-runtime_0.72-35_i386.deb
libpam0g_0.72-35_i386.deb
libpam-modules_0.72-35_i386.deb
klogd_1.4.1-10_i386.deb
gettext-base_0.10.40-1_i386.deb
fdutils_5.3-5_i386.deb
elvis-tiny_1.4-18_i386.deb
dpkg_1.9.19_i386.deb
bsdutils_2.11n-4_i386.deb
base-passwd_3.4.1_i386.deb
base-files_3.0.2_i386.deb
base-config_1.33.9_all.deb
binutils_2.11.92.0.12.3-6_i386.deb
binutils-h8300-hms_2.9.5.0.37.4_i386.deb
gettext_0.10.40-1_i386.deb
make_3.79.1-12_i386.deb
nqc_2.3.r1-3_i386.deb
tclreadline_1.2.0-4_i386.deb
binutils-doc_2.11.92.0.12.3-6_all.deb
cfi-en_3.0-4_all.deb
developers-reference_2.9.0_all.deb
doc-base_0.7.11_all.deb
doc-debian_2.2.5_all.deb
funny-manpages_1.3-4_all.deb
gcl-doc_2.5.0.cvs-1_all.deb
gnupg-doc_2000.10.01-1_all.deb
info_4.0f-1_i386.deb
libpam-doc_0.72-35_all.deb
lskb_08-2000-1_all.deb
man-db_2.3.20-13_i386.deb
parted-doc_1.4.24-1_all.deb
fnlib-data_0.5-6_all.deb
imlib-base_1.9.11-3_all.deb
imlib-progs_1.9.11-3_i386.deb
cpp-2.95_2.95.4-1_i386.deb
expect5.24_5.30.1-11_all.deb
expect_5.32.2-4_i386.deb
expectk5.24_5.30.1-11_all.deb
expectk_5.32.2-4_i386.deb
gcl_2.5.0.cvs-1_i386.deb
imlib1_1.9.11-3_i386.deb
libcupsys2_1.1.14-2_i386.deb
libfreetype6_2.0.8-1_i386.deb
libgd-gif1_1.3-2.deb..deb
libgmp3_3.1.1-13_i386.deb
libjpeg62_6b-5_i386.deb..deb
libldap2_2.0.23-1_i386.deb
libmysqlclient10_3.23.47-6_i386.deb
libpaperg_1.1.5_i386.deb
libparted1.4_1.4.24-1_i386.deb
libxaw6_4.1.0-13_i386.deb
t1lib1_1.3.1-1_i386.deb
tcl8.3_8.3.3-6_i386.deb
tk8.0_8.0.5-9_i386.deb
tk8.3_8.3.3-8_i386.deb
zlib1g_1.1.3-19_i386.deb
eximon_3.34-1_i386.deb
exim_3.34-1_i386.deb
kernel-package_7.85_all.deb
mysql-common_3.23.47-6_all.deb
iptables_1.2.5-1_i386.deb
lpr_2000.05.07-4_i386.deb
mime-support_3.14-1_all.deb
snort_1.7-9_i386.deb
telnet_0.17-17_i386.deb
gnupg_1.0.6-2_i386.deb
libnasl1_1.0.10-1_i386.deb
libnessus1_1.0.10-1_i386.deb
mutt_1.3.27-2_i386.deb
nessus_1.0.10-1_i386.deb
nessusd_1.0.10-1_i386.deb
nessus-plugins_1.0.10-1_i386.deb
mtools_3.9.8-7_i386.deb
sash_3.4-8.1_i386.deb
catdoc_0.91.4-7_i386.deb
groff-base_1.17.2-15_i386.deb
groff_1.17.2-15_i386.deb
gv_3.5.8-25_i386.deb
ibritish_3.1.20-21_i386.deb
ispell_3.1.20-21_i386.deb
less_373-2_i386.deb
magicfilter_1.2-49_i386.deb
dpkg-dev_1.9.19_all.deb
git_4.3.20-2_i386.deb
patch_2.5.4-9_i386.deb
sysutils_1.3.8.5.1_i386.deb
lynx_2.8.4.1b-3_i386.deb
Thanks for any help,
Seneca
seneca@slemish.com
Reply to: