On Mon, 16 Aug 2010 09:16:10 +0530 steve <steve@xxxxxxxxxxxx> wrote: ...snip... > Searching for suspicious files and dirs, it may take a while... > /usr/lib/.libssl.so.1.0.0a.hmac /usr/lib/.libssl.so.10.hmac > /usr/lib/.libcrypto.so.10.hmac /usr/lib/.libcrypto.so.1.0.0a.hmac > /lib/.libgcrypt.so.11.hmac Those are FIPS hmac files. They are shipped with the fedora packages and do not indicate any tampering. ...snip... > My question is why do this files exist and if they are valid, should > this be a bug against chkrootkit to not show this up as a > 'suspicious' file ? Yes, it should I would think. kevin
Attachment:
signature.asc
Description: PGP signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines