On Thu, 2006-10-12 at 19:10 +0530, Vikram Goyal wrote: > Hello, > > I'm using FC5 and recently I started getting warnings from rkhunter cron > check. I manually also updated the hashes with same results. > > What may be the reason??? Any ideas...Anything to worry... > > * System tools > Info: prelinked files found > Performing 'known good' check... > /bin/cat [ BAD ] > /bin/chmod [ BAD ] > /bin/chown [ BAD ] > /bin/date [ BAD ] > /bin/dmesg [ BAD ] > /bin/env [ BAD ] > /bin/grep [ BAD ] > /bin/kill [ BAD ] > /bin/login [ BAD ] > <snip> > /usr/bin/whoami [ BAD ] > -------------------------------------------------------------------------------- > Rootkit Hunter found some bad or unknown hashes. This can be happen due replaced > binaries or updated packages (which give other hashes). Be sure your hashes are > fully updated (rkhunter --update). If you're in doubt about these hashes, contact > the author (fill in the contact form). > -------------------------------------------------------------------------------- > <snip> I get these too, but only on one of the machines?