/bin/kill md5sum different?????

Support for security such as Firewalls and securing linux
Post Reply
foxb
Posts: 1924
Joined: 2006/04/20 19:03:33
Location: Montreal/QC

/bin/kill md5sum different?????

Post by foxb » 2006/10/11 13:13:13

Hi,

strange, but on 3 different machines md5sum on /bin/kill is different. RPM's are the same version....

Any ideas if this is normal behavior?

Thanks

foxb
Posts: 1924
Joined: 2006/04/20 19:03:33
Location: Montreal/QC

Re: /bin/kill md5sum different?????

Post by foxb » 2006/10/11 17:21:38

I've booted from knoppix liveCD checked with clamav, chkrootkit, rkhunter no positive results

I've downloaded rpm from a mirror and extracted kill ---> file size is different 8008 vs. 9896 in my machine

md5sum is also different.

Any suggestions?

foxb
Posts: 1924
Joined: 2006/04/20 19:03:33
Location: Montreal/QC

Re: /bin/kill md5sum different????? (solved)

Post by foxb » 2006/10/11 18:22:38

Asked in IRC

Summary:

It seems to be normal --> it is prelinked binary

there is how to check
[code]
prelink -y --md5 <file name>
[/code]
gives md5sum that could be compared to rpm
and
[code]
prelink -p
[/code]
gives list of prelinked libraries/binaries

Post Reply

Return to “CentOS 4 - Security Support”