similar to: rkhunter and prelink

in my prior message, that should be in rkhunter.conf On Wed, Aug 30, 2017 at 11:43 AM, Tony Schreiner <anthony.schreiner at bc.edu> wrote: > This has come up for me on the most recent upgrade, add the line > > HASH_CMD=sha1sum > > On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote: > >> Can't remember if I posted this before... We're getting

On Wed, August 30, 2017 10:43 am, Tony Schreiner wrote: > This has come up for me on the most recent upgrade, add the line > > HASH_CMD=sha1sum > > On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote: > >> Can't remember if I posted this before... We're getting warnings from >> rkhunterWarning: Checking for prerequisites [ Warning

On Wed, 2017-08-30 at 11:03 -0500, Valeri Galtsev wrote: > On Wed, August 30, 2017 10:43 am, Tony Schreiner wrote: > > This has come up for me on the most recent upgrade, add the line > > > > HASH_CMD=sha1sum > > > > On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote: > > > > > Can't remember if I posted this before...

This has come up for me on the most recent upgrade, add the line HASH_CMD=sha1sum On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote: > Can't remember if I posted this before... We're getting warnings from > rkhunterWarning: Checking for prerequisites [ Warning ] > All file hash checks will be skipped because: > This system uses

Hi, folks, rkhunter is reporting a broken link on one of our servers. This is quite reasonable, since it's on a drive whose controller card I have declared dead the other day. I've been googling, searching in the manpage, and I've done an rkhunter --propupd, but it still finds the broken link. Anyone know how to remove the link from the rkhunter d/b? mark

Dear Friends, I am using CENTOS 4.3 - kernel 2.6.9-42.0.2.EL with rkhunter version 1.2.8, but the rkhunter program show me problem on file /bin/kill. I compare files /bin/kill with other CENTOS 4 and it has same size. ====================== SHOE LOG =========================== Rootkit Hunter 1.2.8 is running Mon, 30 Oct 2006 12:56:44 -0200 Determining OS... Ready Checking binaries *

I updated java-1.7.0-openjdk a few hours ago - it *was* listed as a critical security update, and I don't want yelling from rkhunter. The man page tells me I can tell it rkhunter --propupd <package name>... but it doesn't know the name above as a package. Been googling a bit, and cannot find a good example of a package (other than the manpage's coreutil). Anyone got an example,

Can anybody explain to me what's going on here? This is a CentOS 4 i386 system. [root at edison ~]# rm -f /etc/prelink.cache [root at edison ~]# /etc/cron.daily/prelink [root at edison ~]# rpm -qf /usr/bin/sqlite3 sqlite-3.3.6-2 [root at edison ~]# rpm --verify sqlite prelink: /usr/bin/sqlite3: at least one of file's dependencies has changed since prelinking S.?.....

Hi list, after a bit of struggling I found out how to cleanly install rkhunter ... maybe this is useful for you: * Download rkhunter (I downloaded v 1.2.8) * mv /etc/rpm/platform /root/etc_rpm_platform * setarch i386 rpmbuild -ta --target=i386 rkhunter-1.2.8.tar.gz * mv /root/etc_rpm_platform /etc/rpm/platform * rpm -ivh /usr/src/redhat/RPMS/noarch/rkhunter-1.2.8-1.noarch.rpm * wget

I have a number of CentOS6 machines, and on one of them, the daily prelink cron job aborts. Any ideas what to look for? /etc/cron.daily/prelink: /etc/cron.daily/prelink: line 47: 9381 Aborted (core dumped) /usr/sbin/prelink -av $PRELINK_OPTS >> /var/log/prelink/prelink.log 2>&1 I'm unfamiliar with prelink, so I'm not sure what to look for in the logs.

What are the pros and cons of disabling prelinking in CentOS 4? From what I understand, prelinking is ment to be performance improvement (faster loading time for binaries). I can see some potential benefit on workstations where many different processes are started frequently. But how big is that benefit in real life? Would I slow down things noticably if there is no prelinking? Is

In short, the reason considering (and still only considering) turning it off is to make tripwire usable again (security vs. performance, I guess). Is it possible to completely turn it off system-wide? Any additional steps needed on the existing system (that already have half of the binaries prelinked)? What order of performance degradation to expect? If it is minor, nobody is going to cry

I have a large installer program (~400MB) that fails to run under wine (20050310). It gives me the following: err:virtual:map_image Image was mapped at 0x60640000: standard load address for a Win32 program (0x00400000) not available err:virtual:map_image Do you have exec-shield or prelink active? wine: could not load L"C:\\WebPACK_71_fcfull_i.exe" as Win32 binary The thing is that I

The above discussion of prelink gave me pause for thought... I have a "suite" of programs that I install in their own directory, along with their datafiles, under /opt. Would it be a good idea to add that directory to /etc/prelink.conf? What could go wrong? -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com

On Fri, 2015-08-07 at 09:45 -0400, m.roth at 5-cent.us wrote: > Hi, folks, > > rkhunter is reporting a broken link on one of our servers. This is > quite reasonable, since it's on a drive whose controller card I have > declared dead the other day. I've been googling, searching in the > manpage, and I've done an rkhunter --propupd, but it still finds the >

So, what does this do? # cat /etc/prelink.conf.d/skype.conf -b /usr/bin/skype -- *** e-Mail is NOT a SECURE channel *** Do NOT transmit sensitive data via e-Mail James B. Byrne mailto:ByrneJB at Harte-Lyne.ca Harte & Lyne Limited http://www.harte-lyne.ca 9 Brockley Drive vox: +1 905 561 1241 Hamilton, Ontario fax:

Starting with a fresh load and after I finish hardening the load following the Center for Internet Security (CIS) guidance, I'm wondering whether AIDE or OSSEC would be a better intrusion detection system. I installed AIDE and did a quick test of AIDE and after initializing the db and applying the recent cups update, I found that 1700+ files had changed. Those are a lot of changes to wade

Is there a step by step approach to securing CentOS 4X (or even RHEL 4X)? I don't mean the stuff in the docs/security guide but a working step by step guide? There used to be packages like rkhunter and tripwire but I don't know if the ones in rpmforge/kbs repo are up to date. Thanks, Josh.

Hi all! Trying to get magic workstation (www.magicworkstation.com) to run correctly. My distro (BT4R1) comes with an older version of wine, so I uninstalled it then installed Wine Stable 1.2. Compiled it manually, got it everything it needed save one thing from the ./configure and it seemed to install fine, but it did not fix my problem. There are still some game breaking graphical isssues with

Hi People, I have just started building my own RPMS on both Fedora and CentOS and generally things have gone well. Currently I am trying to create RPMS for some commercial software that we have purchased. Step 1 was install the software using its JAVA Based installer ensuring that all files were installed into a particular directory in /usr/local. Step 2 was create a tar file of the