Re: [CentOS] I've been hacked -- what should I do next?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On 12/1/06, Ralph Angenendt <ra+centos@xxxxxxxxxxxx> wrote:

I'd opt for reinstallation also, as you normall never can really find
out *what* has been changed, if there is/was an active rootkit on that
machine.

for package in $(rpm -qa); do echo -e "${package}"; rpm -V "${package}"; done


When I run this I get an error message similar to the following for a
bunch of the files:

prelink: /lib/tls/i486/libdb-4.2.so: at least one of file's
dependencies has changed since prelinking

I deleted /etc/prelink.cache and manually reran
/etc/cron.daily/prelink but I still get the same thing.  Anyone have
any ideas?  I'm pretty I didn't get this problem with rpm -V in the
past.  Also, this is a Centos4 box yummed up to the latest stuff.

Thanks,
Kennedy
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux