Lots of RKhunter alerts

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
gaia
Forum Regular
Forum Regular
Posts: 213
Joined: Tue Jun 09, 2009 12:57 pm

Lots of RKhunter alerts

Unread post by gaia »

Last night RKhunter (v 1.4.2) had a lot to say (see below). The only yum ran yesterday was

Code: Select all

yum  -y install ipset.x86_64
. Did something happen to RKunter or is this normal behavior? For example, how could ipset affect /usr/bin/perl?

Thanks

Code: Select all

Warning: Package manager verification has failed:
         File: /sbin/ifconfig
         Try running the command 'prelink /sbin/ifconfig' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /sbin/ip
         Try running the command 'prelink /sbin/ip' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /sbin/route
         Try running the command 'prelink /sbin/route' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /sbin/sulogin
         Try running the command 'prelink /sbin/sulogin' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/bash
         Try running the command 'prelink /bin/bash' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/cp
         Try running the command 'prelink /bin/cp' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/find
         Try running the command 'prelink /bin/find' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/login
         Try running the command 'prelink /bin/login' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/ls
         Try running the command 'prelink /bin/ls' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/mv
         Try running the command 'prelink /bin/mv' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/netstat
         Try running the command 'prelink /bin/netstat' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/ps
         Try running the command 'prelink /bin/ps' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/rpm
         Try running the command 'prelink /bin/rpm' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/sed
         Try running the command 'prelink /bin/sed' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/gawk
         Try running the command 'prelink /bin/gawk' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/tcsh
         Try running the command 'prelink /bin/tcsh' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /bin/mailx
         Try running the command 'prelink /bin/mailx' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/sbin/lsof
         Try running the command 'prelink /usr/sbin/lsof' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/curl
         Try running the command 'prelink /usr/bin/curl' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/id
         Try running the command 'prelink /usr/bin/id' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/killall
         Try running the command 'prelink /usr/bin/killall' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/perl
         Try running the command 'prelink /usr/bin/perl' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/pstree
         Try running the command 'prelink /usr/bin/pstree' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/runcon
         Try running the command 'prelink /usr/bin/runcon' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/stat
         Try running the command 'prelink /usr/bin/stat' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/top
         Try running the command 'prelink /usr/bin/top' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/watch
         Try running the command 'prelink /usr/bin/watch' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
Warning: Package manager verification has failed:
         File: /usr/bin/wget
         Try running the command 'prelink /usr/bin/wget' to resolve dependency errors.
         The file hash value has changed
         The file size has changed
CentOS 6.9
ASL 4.0.19-37
scott
Atomicorp Staff - Site Admin
Atomicorp Staff - Site Admin
Posts: 8355
Joined: Wed Dec 31, 1969 8:00 pm
Location: earth
Contact:

Re: Lots of RKhunter alerts

Unread post by scott »

That package only effects one executable: /usr/sbin/ipset
gaia
Forum Regular
Forum Regular
Posts: 213
Joined: Tue Jun 09, 2009 12:57 pm

Re: Lots of RKhunter alerts

Unread post by gaia »

should I setup a prelink cron job or should i remove prelink and its cache?

thanks
CentOS 6.9
ASL 4.0.19-37
Post Reply