Security Incidents mailing list archives

Re: RH6.1/IPChains box hacked


From: jlewis () LEWIS ORG (Jon Lewis)
Date: Sat, 22 Apr 2000 01:45:52 -0400


On Thu, 20 Apr 2000, J. J. Horner wrote:

[jhorner@gateway anaconda-rebuilddb955643425]$ ls -la
total 204
drwxr-xr-x    2 root     root         4096 Apr 13 16:30 .
drwxr-xr-x   17 root     root         4096 Apr 13 16:30 ..
-rw-r--r--    1 root     root            0 Apr 13 16:30 conflictsindex.rpm
-rw-r--r--    1 root     root        16384 Apr 13 16:31 groupindex.rpm
-rw-r--r--    1 root     root        24576 Apr 13 16:31 nameindex.rpm
-rw-r--r--    1 root     root        40960 Apr 13 16:31 providesindex.rpm
-rw-r--r--    1 root     root        98304 Apr 13 16:31 requiredby.rpm
-rw-r--r--    1 root     root        16384 Apr 13 16:31 triggerindex.rpm

None of these are real RPMS, so I don't know what to do with them.

Those aren't RPMS.  They're the files that make up the RPM database.  Have
a look at /var/lib/rpm/.  What they're doing in
anaconda-rebuilddb955643425, I can't say.

----------------------------------------------------------------------
 Jon Lewis *jlewis () lewis org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |
_________http://www.lewis.org/~jlewis/pgp for PGP public key__________


Current thread: