md5sum changes

Support for security such as Firewalls and securing linux
Post Reply
freecityhk
Posts: 1
Joined: 2007/05/10 16:13:03

md5sum changes

Post by freecityhk » 2007/05/10 16:16:28

one day i execute the following command:
md5sum /bin/bash; rpm -e --nodeps bash; yum install bash;md5sum /bin/bash

and get the results:
[b]26c5c9ecce634885f893e43065386166 /bin/bash[/b]
error: %postun(bash-3.0-19.3.i386) scriptlet failed, exit status 255
Setting up Install Process
Setting up repositories
Reading repository metadata in from local files
Parsing package install arguments
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Downloading header for bash to pack into transaction set.
bash-3.0-19.3.i386.rpm 100% |=========================| 48 kB 00:02
---> Package bash.i386 0:3.0-19.3 set to be updated
--> Running transaction check

Dependencies Resolved

=============================================================================
Package Arch Version Repository Size
=============================================================================
Installing:
bash i386 3.0-19.3 base 1.7 M

Transaction Summary
=============================================================================
Install 1 Package(s)
Update 0 Package(s)
Remove 0 Package(s)
Total download size: 1.7 M
Is this ok [y/N]: y
Downloading Packages:
(1/1): bash-3.0-19.3.i386 100% |=========================| 1.7 MB 01:36
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
Installing: bash ######################### [1/1]

Installed: bash.i386 0:3.0-19.3
Complete!
[b]a06309d6091556d9e5ec57bed12c7171 /bin/bash[/b]

does that mean some rootkit has been installed on my server?
Or it is just the update of the repo.?

User avatar
WhatsHisName
Posts: 1544
Joined: 2005/12/19 20:21:43
Location: /earth/usa/nj

md5sum changes

Post by WhatsHisName » 2007/05/10 20:43:38

Why not ask the expert?

[code]# [b]yum --enablerepo=rpmforge install chkrootkit[/b]

# [b]chkrootkit[/b]

# [b]chkrootkit | grep -v not[/b][/code]

Post Reply

Return to “CentOS 4 - Security Support”