Mike wrote: > Hi > I have a horrible feeling that my system may have been compromised > > I have a file libwrap.a (part of tcp_wrappers) like this > > ?r-x-wxrwt 26977 25716 159071 1969188457 May 4 2031 > /usr/lib/libwrap.a You typically get this sort of thing when something has been writing data over your inode table. If you haven't already done so, fsck the file system from the rescue disk as there may well be other damage that isn't obvious. It is more likely there was some system problem rather than a hacker, and you might be able to clear up the problem in this case if there is not too much damage by using rpm -Va and reinstalling any damaged packages, but unless you can work out the cause the problem could reoccur. Michael Young
