Re: [CentOS] Files being modified in /bin/

Jeremy Sanders wrote:

Micky L Martin wrote:

...

Because rpm and rpmverify also seemed to have been modified so I cannot trust 'rpm -V' package verification.

Already did lsof and process tracing but to no avail. Does anyone have any idea how to find that culprit?

Are you sure it's not prelink that's modifying the files? You can google how to disable this.

Any comments or thoughts from the list as to the benefit of prelink? does the system performance change if this is disabled? It causes issues with aide also.

Boot from a CD to check the checksums or run rpm if you want a clean environment.

Jeremy

---

CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos