[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

can rkhunter propupdate correctly be run?

Given the changes in the debian system is it correct to run rkhunter propupdate or may something else be going on? 
From root@verizon.net  Tue Sep  2 06:46:21 2008

Return-Path: <root@verizon.net>
X-Original-To: root
Delivered-To: root@verizon.net
Received: by verizon.net (Postfix, from userid 0)
	id 8062711892; Tue,  2 Sep 2008 06:46:21 -0400 (EDT)
Subject: [rkhunter] verizon.net - Daily report
To: root@verizon.net
Message-Id: <20080902104621.8062711892@verizon.net>
Date: Tue,  2 Sep 2008 06:46:21 -0400 (EDT)
From: root@verizon.net (root)
Status: RO

Warning: The file properties have changed:
         File: /bin/ed
         Current hash: 2dae1f332797d453b27fc0e5af10942632914cc1
         Stored hash : a977751c1a46fd3f01419e0edb2acd26f443e6fe
         Current inode: 10262    Stored inode: 10082
         Current size: 40260    Stored size: 38204
         Current file modification time: 1219819353
         Stored file modification time : 1186326613
Warning: The file properties have changed:
         File: /bin/mktemp
         Current hash: cb8928cb9aba84186d11744596a75dfd2bd420bc
         Stored hash : ac19f5e6d493de185416217febced0a32a13fa9d
         Current inode: 10102    Stored inode: 10069
         Current size: 6672    Stored size: 6824
         Current file modification time: 1218814174
         Stored file modification time : 1202665904
Warning: The file properties have changed:
         File: /usr/bin/awk
         Current hash: ae1c0cf7a30fa9e2d582b2bdf13dcc711a6d8767
         Stored hash : a6a024873474418c6f68db27f6101a9ac170bc69
Warning: The file '/usr/bin/GET' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file properties have changed:
         File: /usr/bin/last
         Current inode: 169076    Stored inode: 169098
         Current file modification time: 1218550190
         Stored file modification time : 1216407616
Warning: The file '/usr/bin/locate' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/bin/lsof' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file properties have changed:
         File: /usr/bin/perl
         Current hash: 72d06a6746691d59d91549f7b16f411f9a7eff75
         Stored hash : edf73d41331342b6fe2a107dedd8623e956f4495
         Current inode: 169327    Stored inode: 169076
         Current file modification time: 1218235539
         Stored file modification time : 1216225970
Warning: The file '/usr/bin/sudo' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/bin/gawk' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/bin/lwp-request' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/bin/locate.findutils' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file properties have changed:
         File: /sbin/init
         Current inode: 8035    Stored inode: 8045
         Current file modification time: 1218550140
         Stored file modification time : 1216407567
Warning: The file properties have changed:
         File: /sbin/runlevel
         Current inode: 8069    Stored inode: 8047
         Current file modification time: 1218550140
         Stored file modification time : 1216407567
Warning: The file properties have changed:
         File: /sbin/sulogin
         Current inode: 8045    Stored inode: 8053
         Current file modification time: 1218550190
         Stored file modification time : 1216407616
Warning: The file properties have changed:
         File: /usr/sbin/adduser
         Current hash: 54afc793cea2831f256d0bc4a08e7a9ccf57a80b
         Stored hash : d8aa5d3bc26d54240bd9a4e8084be2f8e9da2fc2
         Current inode: 56408    Stored inode: 56367
         Current file modification time: 1218404130
         Stored file modification time : 1212714220
Warning: The file properties have changed:
         File: /usr/sbin/rsyslogd
         Current hash: aba7930f7bdbdb9e1bed1f82fa533722138a31b0
         Stored hash : 92ba2ac2a3cf6e893c7162da40bccafd489991cb
         Current inode: 56405    Stored inode: 56384
         Current file modification time: 1218672038
         Stored file modification time : 1216846720
Warning: The file properties have changed:
         File: /usr/sbin/tcpd
         Current hash: 9803209df3ce9fa6ba034c93791add30f10f1d93
         Stored hash : 3e0d17c38096dc8d37dfa8a77b105538195ca868
         Current inode: 56491    Stored inode: 56405
         Current size: 4368    Stored size: 4308
         Current file modification time: 1217029503
         Stored file modification time : 1207324330
Warning: The file '/usr/sbin/unhide' exists on the system, but it is not present in the rkhunter.dat file.
Warning: The file '/usr/sbin/unhide-linux26' exists on the system, but it is not present in the rkhunter.dat file.
Warning: Users have been added to the passwd file:
         messagebus:x:107:112::/var/run/dbus:/bin/false
Warning: Groups have been added to the group file:
         messagebus:x:112:
         powerdev:x:114:

One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
Reply to: