LinuxQuestions.org

Rootkit Hunter: Revision 1.533

Posted 06-26-2015 at 05:46 PM by unSpawn
Updated 06-26-2015 at 05:47 PM by unSpawn

Revision 1.533 belatedly adds support for "XOR.DDoS", please see this SANS ISC diary for details. Please get this revision via http://rkhunter.cvs.sourceforge.net/...nter/?view=tar .

unSpawn

Moderator

Posted in Uncategorized

Views 729 Comments 0 unSpawn is offline

Rootkit Hunter: IptabLex, IptabLes

Posted 06-14-2014 at 04:17 AM by unSpawn
Updated 06-22-2014 at 04:50 AM by unSpawn (//Added auditing examples)

Tags iptablex

Compromises leaving .IptabLes and .IptabLex binaries (with or without dot) in /, /boot, /etc and or /usr seem to be quite common:
http://ubuntuforums.org/showthread.php?t=2226673
http://www.linuxquestions.org/questi...ns-4175502655/
http://forum.synology.com/enu/viewto...p?f=19&t=85779
http://daivietpda.vn/threads/203145/
http://security.stackexchange.com/qu...s-and-iptablex...

unSpawn

Moderator

Posted in Uncategorized

Views 2249 Comments 0 unSpawn is offline

RPM-repackaging google-earth-stable_current for Fedora

Posted 06-14-2014 at 03:34 AM by unSpawn

Tags /usr/bin conflicts, google-earth-stable, repackaging

Code:

Transaction check error:
  file /usr/bin from install of google-earth-stable conflicts with file from package filesystem

While the above error and its fixes are documented well enough across the 'net I'm listing my own spec for future reference. You should probably not want to use this but if you do just save below code as "google-earth-stable.spec" and run it as 'rpmbuild -bb google-earth-stable.spec;'.

Code:

%define __os_install_post  /usr/lib/rpm/brp-compress

...

unSpawn

Moderator

Posted in Uncategorized

Views 1498 Comments 0 unSpawn is offline

Bro, ImportError: No module named BroControl

Posted 06-14-2014 at 03:32 AM by unSpawn

Tags /usr/bin/broctl, bro, importerror, module brocontrol

Should you run bro-1.5.1-9 on Fedora and wonder what

Code:

detected unhandled Python exception in '/usr/bin/broctl'
Traceback (most recent call last):
File "/usr/bin/broctl", line 703, in <module>
from BroControl import util
ImportError: No module named BroControl

means and found Fedora Bugzilla wanting for not fixing the same bug in Fedora 14 and 16 with status "CLOSED WONTFIX" then check out the "/usr/bin/broctl"...

unSpawn

Moderator

Posted in Uncategorized

Views 1269 Comments 0 unSpawn is offline