Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I have run the following as root on a RHEL 4 box to get a list of the modified files:

rpm -Va

The output includes lines such as:

prelink: /tmp/#prelink#.60m2Jq: Recorded 2 dependencies, now seeing -1

S.?.....    /usr/bin/gencat
prelink: /tmp/#prelink#.2izAsr: Recorded 2 dependencies, now seeing -1

S.?.....    /usr/bin/getconf
prelink: /tmp/#prelink#.QIPLxn: Recorded 2 dependencies, now seeing -1

S.?.....    /usr/bin/getent

Are the prelink warnings anything to worry about?

Secondly, the question mark in the MD5 sum column means that the value could not be calculated. Any theories as to why? I can do md5sum filename without any problem.

share|improve this question

1 Answer 1

I would backup and reinstall (--force) the affected packages, just to be on the safe side. My reading of the diagnostic is that those binaries are statically linked (but were not when prelink last ran). If that's true (try ldd getent) that's a strong hint of a cracked machine.

share|improve this answer
    
I concur with AlienLifeForm's analysis. On the surface this sounds like the binaries were altered either accidentally or intentionally. –  slm Feb 14 at 19:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.