robert_skywalker
asked on
please check this chkrootkit output
Are the "Permission denied" messages a reason to worry?
Thanks,
Robert
# ./chkrootkit
ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not infected
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not infected
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not infected
Checking `mingetty'... not infected
Checking `netstat'... not infected
Checking `named'... not infected
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not infected
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not infected
Checking `syslogd'... not infected
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not infected
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for HiDrootkit's default dir... nothing found
Searching for t0rn's default files and dirs... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for Lion Worm default files and dirs... nothing found
Searching for RSHA's default files and dir... nothing found
Searching for RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while... /usr/bin/find: /usr/lib/news/bin/control: Permission denied
/usr/bin/find: /usr/lib/news/bin/mailpost : Permission denied
/usr/bin/find: /usr/lib/news/bin/filechan : Permission denied
/usr/bin/find: /usr/lib/news/bin/gpgverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/sendbatc h: Permission denied
/usr/bin/find: /usr/lib/news/bin/parsecon trol: Permission denied
/usr/bin/find: /usr/lib/news/bin/pgpverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/scanspoo l: Permission denied
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck : Permission denied
/usr/bin/find: /usr/lib/news/bin/writelog : Permission denied
/usr/bin/find: /usr/lib/news/bin/news2mai l: Permission denied
/usr/bin/find: /usr/lib/news/bin/control: Permission denied
/usr/bin/find: /usr/lib/news/bin/mailpost : Permission denied
/usr/bin/find: /usr/lib/news/bin/filechan : Permission denied
/usr/bin/find: /usr/lib/news/bin/gpgverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/sendbatc h: Permission denied
/usr/bin/find: /usr/lib/news/bin/parsecon trol: Permission denied
/usr/bin/find: /usr/lib/news/bin/pgpverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/scanspoo l: Permission denied
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck : Permission denied
/usr/bin/find: /usr/lib/news/bin/writelog : Permission denied
/usr/bin/find: /usr/lib/news/bin/news2mai l: Permission denied
/usr/lib/perl5/5.6.1/i586- linux/.pac klist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Tk/GBARR/ .packlist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Tk/.packl ist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /DBI/.pack list /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Net/SSLea y/.packlis t /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Net/.pack list /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /URI/.pack list /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Tie/IxHas h/.packlis t /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Data/Show Table/.pac klist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /HTML/Pars er/.packli st /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /HTML/Tags et/.packli st /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /MIME/Base 64/.packli st /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Term/Read Line/Gnu/. packlist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Digest/MD 5/.packlis t /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Weblint/. packlist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /w3mir/.pa cklist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Locale/ge ttext/.pac klist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /libwww-pe rl/.packli st /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Storable/ .packlist /usr/lib/perl5/site_perl/5 .6.1/i586- linux/auto /Msql-Mysq l-modules/ .packlist /usr/lib/SunJava2-1.3.1/bi n/.java_wr apper /usr/lib/SunJava2-1.3.1/jr e/bin/.jav a_wrapper
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... /usr/bin/find: /usr/lib/news/bin/control: Permission denied
/usr/bin/find: /usr/lib/news/bin/mailpost : Permission denied
/usr/bin/find: /usr/lib/news/bin/filechan : Permission denied
/usr/bin/find: /usr/lib/news/bin/gpgverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/sendbatc h: Permission denied
/usr/bin/find: /usr/lib/news/bin/parsecon trol: Permission denied
/usr/bin/find: /usr/lib/news/bin/pgpverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/scanspoo l: Permission denied
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck : Permission denied
/usr/bin/find: /usr/lib/news/bin/writelog : Permission denied
/usr/bin/find: /usr/lib/news/bin/news2mai l: Permission denied
nothing found
Searching for Adore Worm... /usr/bin/find: /usr/lib/news/bin/control: Permission denied
/usr/bin/find: /usr/lib/news/bin/mailpost : Permission denied
/usr/bin/find: /usr/lib/news/bin/filechan : Permission denied
/usr/bin/find: /usr/lib/news/bin/gpgverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/sendbatc h: Permission denied
/usr/bin/find: /usr/lib/news/bin/parsecon trol: Permission denied
/usr/bin/find: /usr/lib/news/bin/pgpverif y: Permission denied
/usr/bin/find: /usr/lib/news/bin/scanspoo l: Permission denied
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck : Permission denied
/usr/bin/find: /usr/lib/news/bin/writelog : Permission denied
/usr/bin/find: /usr/lib/news/bin/news2mai l: Permission denied
nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for common ssh-scanners default files... nothing found
Searching for suspect PHP files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... chkproc: nothing detected
chkdirs: nothing detected
Checking `rexedcs'... not found
Checking `sniffer'... eth0: not promisc and no PF_PACKET sockets
ippp1: not promisc and no PF_PACKET sockets
Checking `w55808'... not infected
Checking `wted'... 4 deletion(s) between Thu Oct 30 10:22:14 2008 and Wed Mar 9 13:35:11 1988
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... chklastlog: nothing deleted
Checking `chkutmp'... chkutmp: nothing deleted
Thanks,
Robert
# ./chkrootkit
ROOTDIR is `/'
Checking `amd'... not found
Checking `basename'... not infected
Checking `biff'... not found
Checking `chfn'... not infected
Checking `chsh'... not infected
Checking `cron'... not infected
Checking `crontab'... not infected
Checking `date'... not infected
Checking `du'... not infected
Checking `dirname'... not infected
Checking `echo'... not infected
Checking `egrep'... not infected
Checking `env'... not infected
Checking `find'... not infected
Checking `fingerd'... not found
Checking `gpm'... not infected
Checking `grep'... not infected
Checking `hdparm'... not infected
Checking `su'... not infected
Checking `ifconfig'... not infected
Checking `inetd'... not infected
Checking `inetdconf'... not infected
Checking `identd'... not found
Checking `init'... not infected
Checking `killall'... not infected
Checking `ldsopreload'... not infected
Checking `login'... not infected
Checking `ls'... not infected
Checking `lsof'... not infected
Checking `mail'... not infected
Checking `mingetty'... not infected
Checking `netstat'... not infected
Checking `named'... not infected
Checking `passwd'... not infected
Checking `pidof'... not infected
Checking `pop2'... not found
Checking `pop3'... not found
Checking `ps'... not infected
Checking `pstree'... not infected
Checking `rpcinfo'... not infected
Checking `rlogind'... not found
Checking `rshd'... not found
Checking `slogin'... not infected
Checking `sendmail'... not infected
Checking `sshd'... not infected
Checking `syslogd'... not infected
Checking `tar'... not infected
Checking `tcpd'... not infected
Checking `tcpdump'... not infected
Checking `top'... not infected
Checking `telnetd'... not found
Checking `timed'... not found
Checking `traceroute'... not infected
Checking `vdir'... not infected
Checking `w'... not infected
Checking `write'... not infected
Checking `aliens'... no suspect files
Searching for sniffer's logs, it may take a while... nothing found
Searching for HiDrootkit's default dir... nothing found
Searching for t0rn's default files and dirs... nothing found
Searching for t0rn's v8 defaults... nothing found
Searching for Lion Worm default files and dirs... nothing found
Searching for RSHA's default files and dir... nothing found
Searching for RH-Sharpe's default files... nothing found
Searching for Ambient's rootkit (ark) default files and dirs... nothing found
Searching for suspicious files and dirs, it may take a while... /usr/bin/find: /usr/lib/news/bin/control:
/usr/bin/find: /usr/lib/news/bin/mailpost
/usr/bin/find: /usr/lib/news/bin/filechan
/usr/bin/find: /usr/lib/news/bin/gpgverif
/usr/bin/find: /usr/lib/news/bin/sendbatc
/usr/bin/find: /usr/lib/news/bin/parsecon
/usr/bin/find: /usr/lib/news/bin/pgpverif
/usr/bin/find: /usr/lib/news/bin/scanspoo
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck
/usr/bin/find: /usr/lib/news/bin/writelog
/usr/bin/find: /usr/lib/news/bin/news2mai
/usr/bin/find: /usr/lib/news/bin/control:
/usr/bin/find: /usr/lib/news/bin/mailpost
/usr/bin/find: /usr/lib/news/bin/filechan
/usr/bin/find: /usr/lib/news/bin/gpgverif
/usr/bin/find: /usr/lib/news/bin/sendbatc
/usr/bin/find: /usr/lib/news/bin/parsecon
/usr/bin/find: /usr/lib/news/bin/pgpverif
/usr/bin/find: /usr/lib/news/bin/scanspoo
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck
/usr/bin/find: /usr/lib/news/bin/writelog
/usr/bin/find: /usr/lib/news/bin/news2mai
/usr/lib/perl5/5.6.1/i586-
Searching for LPD Worm files and dirs... nothing found
Searching for Ramen Worm files and dirs... nothing found
Searching for Maniac files and dirs... nothing found
Searching for RK17 files and dirs... nothing found
Searching for Ducoci rootkit... /usr/bin/find: /usr/lib/news/bin/control:
/usr/bin/find: /usr/lib/news/bin/mailpost
/usr/bin/find: /usr/lib/news/bin/filechan
/usr/bin/find: /usr/lib/news/bin/gpgverif
/usr/bin/find: /usr/lib/news/bin/sendbatc
/usr/bin/find: /usr/lib/news/bin/parsecon
/usr/bin/find: /usr/lib/news/bin/pgpverif
/usr/bin/find: /usr/lib/news/bin/scanspoo
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck
/usr/bin/find: /usr/lib/news/bin/writelog
/usr/bin/find: /usr/lib/news/bin/news2mai
nothing found
Searching for Adore Worm... /usr/bin/find: /usr/lib/news/bin/control:
/usr/bin/find: /usr/lib/news/bin/mailpost
/usr/bin/find: /usr/lib/news/bin/filechan
/usr/bin/find: /usr/lib/news/bin/gpgverif
/usr/bin/find: /usr/lib/news/bin/sendbatc
/usr/bin/find: /usr/lib/news/bin/parsecon
/usr/bin/find: /usr/lib/news/bin/pgpverif
/usr/bin/find: /usr/lib/news/bin/scanspoo
/usr/bin/find: /usr/lib/news/bin/fastrm: Permission denied
/usr/bin/find: /usr/lib/news/bin/filter: Permission denied
/usr/bin/find: /usr/lib/news/bin/inncheck
/usr/bin/find: /usr/lib/news/bin/writelog
/usr/bin/find: /usr/lib/news/bin/news2mai
nothing found
Searching for ShitC Worm... nothing found
Searching for Omega Worm... nothing found
Searching for Sadmind/IIS Worm... nothing found
Searching for MonKit... nothing found
Searching for Showtee... nothing found
Searching for OpticKit... nothing found
Searching for T.R.K... nothing found
Searching for Mithra... nothing found
Searching for LOC rootkit... nothing found
Searching for Romanian rootkit... nothing found
Searching for Suckit rootkit... nothing found
Searching for Volc rootkit... nothing found
Searching for Gold2 rootkit... nothing found
Searching for TC2 Worm default files and dirs... nothing found
Searching for Anonoying rootkit default files and dirs... nothing found
Searching for ZK rootkit default files and dirs... nothing found
Searching for ShKit rootkit default files and dirs... nothing found
Searching for AjaKit rootkit default files and dirs... nothing found
Searching for zaRwT rootkit default files and dirs... nothing found
Searching for Madalin rootkit default files... nothing found
Searching for Fu rootkit default files... nothing found
Searching for ESRK rootkit default files... nothing found
Searching for rootedoor... nothing found
Searching for ENYELKM rootkit default files... nothing found
Searching for common ssh-scanners default files... nothing found
Searching for suspect PHP files... nothing found
Searching for anomalies in shell history files... nothing found
Checking `asp'... not infected
Checking `bindshell'... not infected
Checking `lkm'... chkproc: nothing detected
chkdirs: nothing detected
Checking `rexedcs'... not found
Checking `sniffer'... eth0: not promisc and no PF_PACKET sockets
ippp1: not promisc and no PF_PACKET sockets
Checking `w55808'... not infected
Checking `wted'... 4 deletion(s) between Thu Oct 30 10:22:14 2008 and Wed Mar 9 13:35:11 1988
Checking `scalper'... not infected
Checking `slapper'... not infected
Checking `z2'... chklastlog: nothing deleted
Checking `chkutmp'... chkutmp: nothing deleted
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ls -ld /usr/lib/news
ls -l /usr/lib/news
ls -l /usr/lib/news/bin
lsattr -d /usr/lib/news
lsattr /usr/lib/news
lsattr /usr/lib/news/bin
ls -l /usr/lib/news
ls -l /usr/lib/news/bin
lsattr -d /usr/lib/news
lsattr /usr/lib/news
lsattr /usr/lib/news/bin
have a look in;
/var/log/messages
/var/log/secure
/var/log/audit/audit.log
... what linux distro is it?
if you are using redhat based distro verify the package;
rpm -V inn
Permission denied while as root is a little strange IMHO.
/var/log/messages
/var/log/secure
/var/log/audit/audit.log
... what linux distro is it?
if you are using redhat based distro verify the package;
rpm -V inn
Permission denied while as root is a little strange IMHO.
can you post the output of `id` please, I just want to check your uid/gid settings
posting /etc/passwd may help as well (this is just a guess!)
posting /etc/passwd may help as well (this is just a guess!)
I just installed inn and it listed fine, I'm hoping it's a SELinux thing at the moment. Don't want to say it's OK until it's clearer it is not a problem.
ASKER
it's a SuSE Linux 8.?
# ls -ld /usr/lib/news
drwxr-xr-x 5 news news 144 Sep 5 2002 /usr/lib/news
# ls -l /usr/lib/news
total 33
drwxr-xr-x 5 news news 144 Sep 5 2002 .
drwxr-xr-x 85 root root 29040 Oct 9 2004 ..
drwxr-xr-x 6 news news 2288 Sep 5 2002 bin
drwxr-xr-x 2 news news 216 Sep 5 2002 include
lrwxrwxrwx 1 root root 9 Sep 14 2005 inews -> bin/inews
drwxr-xr-x 2 news news 264 Sep 5 2002 lib
#
# ls -l /usr/lib/news/bin
ls: /usr/lib/news/bin/control: Permission denied
total 3421
drwxr-xr-x 6 news news 2288 Sep 5 2002 .
drwxr-xr-x 5 news news 144 Sep 5 2002 ..
-r-xr-xr-x 1 news news 4644 Mar 23 2002 actmerge
-r-xr-xr-x 1 news news 58316 Mar 23 2002 actsync
-r-xr-xr-x 1 news news 6133 Mar 23 2002 actsyncd
-r-xr-xr-x 1 news news 109156 May 2 2002 archive
drwxr-xr-x 4 news news 96 Sep 5 2002 auth
-r-xr-xr-x 1 news news 108464 May 2 2002 batcher
-r-xr-xr-x 1 news news 31940 Mar 23 2002 buffchan
-r-xr-x--- 1 news news 8084 Mar 23 2002 cnfsheadconf
-r-xr-x--- 1 news news 13936 Mar 23 2002 cnfsstat
-r-xr-x--- 1 news news 2557 Mar 23 2002 controlbatch
-r-xr-x--- 1 news news 12397 Mar 23 2002 controlchan
-r-xr-xr-x 1 news news 11868 Mar 23 2002 convdate
-r-xr-xr-x 1 news news 3428 Mar 23 2002 convertspool
-r-xr-x--- 1 news news 33064 Mar 23 2002 ctlinnd
-r-xr-xr-x 1 news news 103308 May 2 2002 cvtbatch
-r-xr-x--- 1 news news 1576 Mar 23 2002 dbprocs
-r-xr-x--- 1 news news 123856 May 2 2002 expire
-r-xr-x--- 1 news news 152988 May 2 2002 expireover
-r-xr-x--- 1 news news 688 Mar 23 2002 expirerm
-r-xr-xr-x 1 news news 107692 May 2 2002 fastrm
-r-xr-xr-x 1 news news 27328 Mar 23 2002 filechan
drwxr-xr-x 2 news news 328 Sep 5 2002 filter
-r-xr-xr-x 1 news news 3166 Mar 23 2002 findmissing.pl
-r-xr-xr-x 1 news news 30476 Mar 23 2002 getlist
-r-xr-xr-x 1 news news 7009 Mar 23 2002 gpgverify
-r-xr-xr-x 1 news news 111896 May 2 2002 grephistory
-rwxr-xr-x 1 root root 25108 Mar 23 2002 gup
-rwxr-xr-x 1 root root 826 Mar 23 2002 gupadd
-rwxr-xr-x 1 root root 1234 Mar 23 2002 gupdate
-rwxr-xr-x 1 root root 566 Mar 23 2002 gupverify
-rwxr-sr-x 1 news news 51940 Mar 23 2002 inews
-r-xr-x--- 1 news news 27157 Mar 23 2002 inncheck
-r-xr-xr-x 1 news news 26344 Mar 23 2002 innconfval
-r-xr-x--- 1 news news 322936 May 2 2002 innd
-r-xr-xr-x 1 news news 150884 May 2 2002 inndf
-rwsr-xr-- 1 root news 29928 Mar 23 2002 inndstart
-r-xr-x--- 1 news news 254744 May 2 2002 innfeed
-r-xr-xr-x 1 news news 1750 Mar 23 2002 innmail
-r-xr-x--- 1 news news 87629 Mar 23 2002 innreport
-r-xr-x--- 1 news news 1751 Mar 23 2002 innstat
-r-xr-x--- 1 news news 7766 Mar 23 2002 innwatch
-r-xr-xr-x 1 news news 34052 Mar 23 2002 innxbatch
-r-xr-xr-x 1 news news 126668 May 2 2002 innxmit
-r-xr-xr-x 1 news news 11029 Mar 23 2002 mailpost
-r-xr-x--- 1 news news 39484 Mar 23 2002 makedbz
-r-xr-x--- 1 news news 163580 May 2 2002 makehistory
-r-xr-x--- 1 news news 3199 Mar 23 2002 mod-active
-r-xr-x--- 1 news news 13630 Mar 23 2002 news.daily
-r-xr-xr-x 1 news news 3364 Mar 23 2002 news2mail
-r-xr-x--- 1 news news 40968 Mar 23 2002 newsrequeue
-r-xr-xr-x 1 news news 273572 May 2 2002 nnrpd
-r-xr-xr-x 1 news news 44736 Mar 23 2002 nntpget
-r-xr-xr-x 1 news news 9894 Mar 23 2002 nntpsend
-r-xr-x--- 1 news news 3108 Mar 23 2002 ovdb_recover
lrwxrwxrwx 1 root root 12 Sep 14 2005 ovdb_upgrade -> ovdb_recover
-r-xr-x--- 1 news news 151172 May 2 2002 overchan
-r-xr-x--- 1 news news 5208 Mar 23 2002 parsecontrol
-r-xr-xr-x 1 news news 17049 Mar 23 2002 pgpverify
-r-xr-x--- 1 news news 5447 Mar 23 2002 procbatch
-r-xr-x--- 1 news news 39100 Mar 23 2002 prunehistory
-r-xr-xr-x 1 news news 15002 Mar 23 2002 pullnews
-r-xr-x--- 1 news news 4777 Mar 23 2002 rc.news
-rwsr-x--- 1 news uucp 38120 Mar 23 2002 rnews
drwxr-xr-x 2 news news 152 Sep 5 2002 rnews.libexec
-r-xr-x--- 1 news news 7101 Mar 23 2002 scanlogs
-r-xr-xr-x 1 news news 12671 Mar 23 2002 scanspool
-r-xr-xr-x 1 news news 2244 Mar 23 2002 send-ihave
-r-xr-xr-x 1 news news 1693 Mar 23 2002 send-nntp
-r-xr-xr-x 1 news news 2706 May 2 2002 send-uucp
-r-xr-xr-x 1 news news 4291 May 2 2002 send-uucp.pl
-r-xr-xr-x 1 news news 4790 May 2 2002 sendbatch
-r-xr-xr-x 1 news news 867 Mar 23 2002 sendxbatches
-r-xr-xr-x 1 news news 5836 Mar 23 2002 shlock
-r-xr-xr-x 1 news news 28776 Mar 23 2002 shrinkfile
-r-xr-xr-x 1 news news 18424 Mar 23 2002 signcontrol
-r-xr-xr-x 1 news news 2175 Mar 23 2002 simpleftp
-r-xr-xr-x 1 news news 103276 May 2 2002 sm
-rwsr-xr-- 1 root news 26120 Mar 23 2002 startinnfeed
-r-xr-x--- 1 news news 1388 Mar 23 2002 tally.control
-r-xr-x--- 1 news news 1212 Mar 23 2002 writelog
# lsattr -d /usr/lib/news
-------------- /usr/lib/news
# lsattr /usr/lib/news
-------------- /usr/lib/news/bin
-------------- /usr/lib/news/lib
-------------- /usr/lib/news/inews
-------------- /usr/lib/news/include
# lsattr /usr/lib/news/bin
-------------- /usr/lib/news/bin/sm
-------------- /usr/lib/news/bin/gup
-------------- /usr/lib/news/bin/auth
-------------- /usr/lib/news/bin/innd
-------------- /usr/lib/news/bin/expirerm
-------------- /usr/lib/news/bin/inndstar t
-------------- /usr/lib/news/bin/dbprocs
/usr/lib/news/bin/control: Permission denied
-------------- /usr/lib/news/bin/news.dai ly
-------------- /usr/lib/news/bin/ctlinnd
-------------- /usr/lib/news/bin/tally.co ntrol
-------------- /usr/lib/news/bin/sendxbat ches
-------------- /usr/lib/news/bin/makehist ory
-------------- /usr/lib/news/bin/inews
-------------- /usr/lib/news/bin/inndf
-------------- /usr/lib/news/bin/nnrpd
-------------- /usr/lib/news/bin/rnews
-------------- /usr/lib/news/bin/innrepor t
-------------- /usr/lib/news/bin/pullnews
-------------- /usr/lib/news/bin/scanlogs
-------------- /usr/lib/news/bin/cnfsstat
-------------- /usr/lib/news/bin/ovdb_rec over
-------------- /usr/lib/news/bin/innxbatc h
-------------- /usr/lib/news/bin/prunehis tory
-------------- /usr/lib/news/bin/grephist ory
-------------- /usr/lib/news/bin/makedbz
-------------- /usr/lib/news/bin/send-nnt p
-------------- /usr/lib/news/bin/send-uuc p
-------------- /usr/lib/news/bin/mailpost
-------------- /usr/lib/news/bin/filechan
-------------- /usr/lib/news/bin/gpgverif y
-------------- /usr/lib/news/bin/sendbatc h
-------------- /usr/lib/news/bin/parsecon trol
-------------- /usr/lib/news/bin/pgpverif y
-------------- /usr/lib/news/bin/scanspoo l
-------------- /usr/lib/news/bin/fastrm
-------------- /usr/lib/news/bin/filter
-------------- /usr/lib/news/bin/convdate
-------------- /usr/lib/news/bin/expire
-------------- /usr/lib/news/bin/getlist
-------------- /usr/lib/news/bin/shrinkfi le
-------------- /usr/lib/news/bin/findmiss ing.pl
-------------- /usr/lib/news/bin/gupadd
-------------- /usr/lib/news/bin/mod-acti ve
-------------- /usr/lib/news/bin/controlc han
-------------- /usr/lib/news/bin/rnews.li bexec
-------------- /usr/lib/news/bin/overchan
-------------- /usr/lib/news/bin/cvtbatch
-------------- /usr/lib/news/bin/actsync
-------------- /usr/lib/news/bin/actmerge
-------------- /usr/lib/news/bin/nntpget
-------------- /usr/lib/news/bin/actsyncd
-------------- /usr/lib/news/bin/newsrequ eue
-------------- /usr/lib/news/bin/buffchan
-------------- /usr/lib/news/bin/shlock
-------------- /usr/lib/news/bin/startinn feed
-------------- /usr/lib/news/bin/gupverif y
-------------- /usr/lib/news/bin/procbatc h
-------------- /usr/lib/news/bin/gupdate
-------------- /usr/lib/news/bin/converts pool
-------------- /usr/lib/news/bin/send-iha ve
-------------- /usr/lib/news/bin/batcher
-------------- /usr/lib/news/bin/archive
-------------- /usr/lib/news/bin/simpleft p
-------------- /usr/lib/news/bin/ovdb_upg rade
-------------- /usr/lib/news/bin/signcont rol
-------------- /usr/lib/news/bin/controlb atch
-------------- /usr/lib/news/bin/send-uuc p.pl
-------------- /usr/lib/news/bin/cnfshead conf
-------------- /usr/lib/news/bin/innfeed
-------------- /usr/lib/news/bin/innmail
-------------- /usr/lib/news/bin/innstat
-------------- /usr/lib/news/bin/innxmit
-------------- /usr/lib/news/bin/inncheck
-------------- /usr/lib/news/bin/writelog
-------------- /usr/lib/news/bin/news2mai l
-------------- /usr/lib/news/bin/innwatch
-------------- /usr/lib/news/bin/expireov er
-------------- /usr/lib/news/bin/nntpsend
-------------- /usr/lib/news/bin/rc.news
-------------- /usr/lib/news/bin/innconfv al
# rpm -V inn
.......T c /etc/init.d/inn
.......T c /etc/news/.pgp/pubring.pgp
.......T c /etc/news/.profile
.......T c /etc/news/actsync.cfg
.......T c /etc/news/actsync.ign
.......T c /etc/news/buffindexed.conf
.......T c /etc/news/control.ctl
.......T c /etc/news/crontab.sample
.......T c /etc/news/cycbuff.conf
.......T c /etc/news/distrib.pats
.......T c /etc/news/distributions
.......T c /etc/news/expire.ctl
.......T c /etc/news/incoming.conf
.......T c /etc/news/inn.conf
.......T c /etc/news/innfeed.conf
.......T c /etc/news/innreport.conf
.......T c /etc/news/innwatch.ctl
.......T c /etc/news/moderators
.......T c /etc/news/motd.news
.......T c /etc/news/news2mail.cf
.......T c /etc/news/newsfeeds
.......T c /etc/news/nnrpd.track
.......T c /etc/news/nntpsend.ctl
.......T c /etc/news/ovdb.conf
.......T c /etc/news/overview.fmt
.......T c /etc/news/passwd.nntp
.......T c /etc/news/radius.conf
.......T c /etc/news/readers.conf
.......T c /etc/news/sasl.conf
.......T c /etc/news/send-uucp.cf
.......T c /etc/news/storage.conf
.......T c /etc/news/subscriptions
.......T /usr/lib/news/bin/actmerge
.......T /usr/lib/news/bin/actsync
.......T /usr/lib/news/bin/actsyncd
.......T /usr/lib/news/bin/auth/pas swd/ckpass wd
.......T /usr/lib/news/bin/auth/pas swd/pwchec k
.......T /usr/lib/news/bin/auth/pas swd/radius
.......T /usr/lib/news/bin/auth/res olv/domain
.......T /usr/lib/news/bin/auth/res olv/ident
.......T /usr/lib/news/bin/buffchan
.......T /usr/lib/news/bin/cnfshead conf
.......T /usr/lib/news/bin/cnfsstat
missing /usr/lib/news/bin/control
missing /usr/lib/news/bin/control/ checkgroup s
missing /usr/lib/news/bin/control/ checkgroup s.pl
missing /usr/lib/news/bin/control/ default
missing /usr/lib/news/bin/control/ ihave
missing /usr/lib/news/bin/control/ ihave.pl
missing /usr/lib/news/bin/control/ newgroup
missing /usr/lib/news/bin/control/ newgroup.p l
missing /usr/lib/news/bin/control/ rmgroup
missing /usr/lib/news/bin/control/ rmgroup.pl
missing /usr/lib/news/bin/control/ sendme
missing /usr/lib/news/bin/control/ sendme.pl
missing /usr/lib/news/bin/control/ sendsys
missing /usr/lib/news/bin/control/ sendsys.pl
missing /usr/lib/news/bin/control/ senduuname
missing /usr/lib/news/bin/control/ senduuname .pl
missing /usr/lib/news/bin/control/ version
missing /usr/lib/news/bin/control/ version.pl
.......T /usr/lib/news/bin/controlb atch
.......T /usr/lib/news/bin/controlc han
.......T /usr/lib/news/bin/convdate
.......T /usr/lib/news/bin/converts pool
.......T /usr/lib/news/bin/ctlinnd
.......T /usr/lib/news/bin/dbprocs
.......T /usr/lib/news/bin/expirerm
.......T /usr/lib/news/bin/filechan
.......T c /usr/lib/news/bin/filter/I NN.py
.......T c /usr/lib/news/bin/filter/f ilter.tcl
.......T c /usr/lib/news/bin/filter/f ilter_innd .pl
.......T c /usr/lib/news/bin/filter/f ilter_innd .py
.......T c /usr/lib/news/bin/filter/f ilter_nnrp d.pl
.......T c /usr/lib/news/bin/filter/n nrpd_auth. pl
.......T c /usr/lib/news/bin/filter/n nrpd_auth. py
.......T c /usr/lib/news/bin/filter/s tartup.tcl
.......T c /usr/lib/news/bin/filter/s tartup_inn d.pl
.......T /usr/lib/news/bin/findmiss ing.pl
.......T /usr/lib/news/bin/getlist
.......T /usr/lib/news/bin/gpgverif y
.M.....T /usr/lib/news/bin/inews
.......T /usr/lib/news/bin/inncheck
.......T /usr/lib/news/bin/innconfv al
.M.....T /usr/lib/news/bin/inndstar t
.......T /usr/lib/news/bin/innmail
.......T /usr/lib/news/bin/innrepor t
.......T /usr/lib/news/bin/innstat
.......T /usr/lib/news/bin/innwatch
.......T /usr/lib/news/bin/innxbatc h
.......T /usr/lib/news/bin/mailpost
.......T /usr/lib/news/bin/makedbz
.......T /usr/lib/news/bin/mod-acti ve
.......T /usr/lib/news/bin/news.dai ly
.......T /usr/lib/news/bin/news2mai l
.......T /usr/lib/news/bin/newsrequ eue
.......T /usr/lib/news/bin/nntpget
.......T /usr/lib/news/bin/nntpsend
.......T /usr/lib/news/bin/ovdb_rec over
.......T /usr/lib/news/bin/parsecon trol
.......T /usr/lib/news/bin/pgpverif y
.......T /usr/lib/news/bin/procbatc h
.......T /usr/lib/news/bin/prunehis tory
.......T /usr/lib/news/bin/pullnews
.......T /usr/lib/news/bin/rc.news
.M.....T /usr/lib/news/bin/rnews
.......T /usr/lib/news/bin/rnews.li bexec/c7un batch
.......T /usr/lib/news/bin/rnews.li bexec/deco de
.......T /usr/lib/news/bin/rnews.li bexec/enco de
.......T /usr/lib/news/bin/rnews.li bexec/gunb atch
.......T /usr/lib/news/bin/scanlogs
.......T /usr/lib/news/bin/scanspoo l
.......T /usr/lib/news/bin/send-iha ve
.......T /usr/lib/news/bin/send-nnt p
.......T /usr/lib/news/bin/sendxbat ches
.......T /usr/lib/news/bin/shlock
.......T /usr/lib/news/bin/shrinkfi le
.......T /usr/lib/news/bin/signcont rol
.......T /usr/lib/news/bin/simpleft p
.M.....T /usr/lib/news/bin/startinn feed
.......T /usr/lib/news/bin/tally.co ntrol
.......T /usr/lib/news/bin/writelog
.......T /usr/lib/news/lib/docheckg roups
.......T /usr/lib/news/lib/innshell vars
.......T /usr/lib/news/lib/innshell vars.pl
.......T /usr/lib/news/lib/innshell vars.tcl
..5....T /usr/lib/news/lib/libinn.a
.......T c /var/lib/news/active
.......T c /var/lib/news/active.times
.......T c /var/lib/news/history
.......T c /var/lib/news/history.dir
.......T c /var/lib/news/history.pag
.......T c /var/lib/news/newsgroups
missing /var/log/news/news
.M...... /var/log/news/news.crit
.M...... /var/log/news/news.err
.M...... /var/log/news/news.notice
# id
uid=0(root) gid=0(root) groups=0(root),1(bin),14(u ucp),15(sh adow),16(d ialout),17 (audio),65 533(nobody ),65534(no group)
# cat /etc/passwd
root:x:0:0:root:/root:/bin /bash
bin:x:1:1:bin:/bin:/bin/ba sh
daemon:x:2:2:Daemon:/sbin: /bin/bash
lp:x:4:7:Printing daemon:/var/spool/lpd:/bin /bash
mail:x:8:12:Mailer daemon:/var/spool/clientmq ueue:/bin/ false
games:x:12:100:Games account:/var/games:/bin/ba sh
at:x:25:25:Batch jobs daemon:/var/spool/atjobs:/ bin/bash
postgres:x:26:2:Postgres database admin:/var/lib/pgsql:/bin/ bash
mdom:x:28:28:Mailing list agent:/usr/lib/majordomo:/ bin/bash
wwwrun:x:30:65534:WWW daemon apache:/var/lib/wwwrun:/bi n/bash
squid:x:31:65534:WWW proxy squid:/var/squid:/bin/bash
fax:x:33:14:Facsimile agent:/var/spool/fax:/bin/ bash
gnats:x:34:65534:Gnats GNU backtracking system:/usr/lib/gnats:/bin /bash
adabas:x:36:100:Adabas-D database admin:/usr/lib/adabas:/bin /bash
amanda:x:37:6:Amanda admin:/var/lib/amanda:/bin /bash
irc:x:39:65534:IRC daemon:/usr/lib/ircd:/bin/ bash
ftp:x:40:2:FTP account:/usr/local/ftp:/bin/bash
firewall:x:41:31:Firewall account:/var/lib/firewall: /bin/false
named:x:44:44:Nameserver daemon:/var/named:/bin/bas h
fnet:x:49:14:FidoNet account:/var/spool/fnet:/b in/bash
gdm:x:50:15:Gnome Display Manager daemon:/var/lib/gdm:/bin/b ash
postfix:x:51:51:Postfix daemon:/var/spool/postfix: /bin/false
cyrus:x:96:12:IMAP daemon:/usr/lib/cyrus:/bin /bash
oracle:x:59:54:Oracle database admin:/opt/oracle:/bin/bas h
mysql:x:60:2:MySQL database admin:/var/lib/mysql:/bin/ false
dpbox:x:61:56:DpBox account:/var/spool/dpbox:/ bin/false
ingres:x:62:3:Ingres database admin:/opt/tngfw/ingres:/b in/bash
zope:x:64:2:Zope daemon:/var/lib/zope:/bin/ false
vscan:x:65:65534:Vscan account:/var/spool/vscan:/ bin/false
wnn:x:66:100:Wnn system account:/var/lib/wnn:/bin/ false
pop:x:67:100:POP admin:/var/lib/pop:/bin/fa lse
perforce:x:68:60:Perfoce admin:/var/lib/perforce:/b in/false
sapdb:x:69:61:SAPDB demo account:/var/opt/sapdb:/bi n/bash
db4web:x:70:100:DB4Web account:/opt/db4web:/bin/b ash
nobody:x:65534:65533:nobod y:/var/lib /nobody:/b in/bash
robert:x:500:100:Robert Schelander:/home/robert:/b in/bash
man:x:13:62:Manual pages viewer:/var/cache/man:/bin /bash
news:x:9:13:News system:/etc/news:/bin/bash
sshd:x:74:65:SSH daemon:/var/lib/sshd:/bin/ false
uucp:x:10:14:Unix-to-Unix CoPy system:/etc/uucp:/bin/bash
#
# ls -ld /usr/lib/news
drwxr-xr-x 5 news news 144 Sep 5 2002 /usr/lib/news
# ls -l /usr/lib/news
total 33
drwxr-xr-x 5 news news 144 Sep 5 2002 .
drwxr-xr-x 85 root root 29040 Oct 9 2004 ..
drwxr-xr-x 6 news news 2288 Sep 5 2002 bin
drwxr-xr-x 2 news news 216 Sep 5 2002 include
lrwxrwxrwx 1 root root 9 Sep 14 2005 inews -> bin/inews
drwxr-xr-x 2 news news 264 Sep 5 2002 lib
#
# ls -l /usr/lib/news/bin
ls: /usr/lib/news/bin/control:
total 3421
drwxr-xr-x 6 news news 2288 Sep 5 2002 .
drwxr-xr-x 5 news news 144 Sep 5 2002 ..
-r-xr-xr-x 1 news news 4644 Mar 23 2002 actmerge
-r-xr-xr-x 1 news news 58316 Mar 23 2002 actsync
-r-xr-xr-x 1 news news 6133 Mar 23 2002 actsyncd
-r-xr-xr-x 1 news news 109156 May 2 2002 archive
drwxr-xr-x 4 news news 96 Sep 5 2002 auth
-r-xr-xr-x 1 news news 108464 May 2 2002 batcher
-r-xr-xr-x 1 news news 31940 Mar 23 2002 buffchan
-r-xr-x--- 1 news news 8084 Mar 23 2002 cnfsheadconf
-r-xr-x--- 1 news news 13936 Mar 23 2002 cnfsstat
-r-xr-x--- 1 news news 2557 Mar 23 2002 controlbatch
-r-xr-x--- 1 news news 12397 Mar 23 2002 controlchan
-r-xr-xr-x 1 news news 11868 Mar 23 2002 convdate
-r-xr-xr-x 1 news news 3428 Mar 23 2002 convertspool
-r-xr-x--- 1 news news 33064 Mar 23 2002 ctlinnd
-r-xr-xr-x 1 news news 103308 May 2 2002 cvtbatch
-r-xr-x--- 1 news news 1576 Mar 23 2002 dbprocs
-r-xr-x--- 1 news news 123856 May 2 2002 expire
-r-xr-x--- 1 news news 152988 May 2 2002 expireover
-r-xr-x--- 1 news news 688 Mar 23 2002 expirerm
-r-xr-xr-x 1 news news 107692 May 2 2002 fastrm
-r-xr-xr-x 1 news news 27328 Mar 23 2002 filechan
drwxr-xr-x 2 news news 328 Sep 5 2002 filter
-r-xr-xr-x 1 news news 3166 Mar 23 2002 findmissing.pl
-r-xr-xr-x 1 news news 30476 Mar 23 2002 getlist
-r-xr-xr-x 1 news news 7009 Mar 23 2002 gpgverify
-r-xr-xr-x 1 news news 111896 May 2 2002 grephistory
-rwxr-xr-x 1 root root 25108 Mar 23 2002 gup
-rwxr-xr-x 1 root root 826 Mar 23 2002 gupadd
-rwxr-xr-x 1 root root 1234 Mar 23 2002 gupdate
-rwxr-xr-x 1 root root 566 Mar 23 2002 gupverify
-rwxr-sr-x 1 news news 51940 Mar 23 2002 inews
-r-xr-x--- 1 news news 27157 Mar 23 2002 inncheck
-r-xr-xr-x 1 news news 26344 Mar 23 2002 innconfval
-r-xr-x--- 1 news news 322936 May 2 2002 innd
-r-xr-xr-x 1 news news 150884 May 2 2002 inndf
-rwsr-xr-- 1 root news 29928 Mar 23 2002 inndstart
-r-xr-x--- 1 news news 254744 May 2 2002 innfeed
-r-xr-xr-x 1 news news 1750 Mar 23 2002 innmail
-r-xr-x--- 1 news news 87629 Mar 23 2002 innreport
-r-xr-x--- 1 news news 1751 Mar 23 2002 innstat
-r-xr-x--- 1 news news 7766 Mar 23 2002 innwatch
-r-xr-xr-x 1 news news 34052 Mar 23 2002 innxbatch
-r-xr-xr-x 1 news news 126668 May 2 2002 innxmit
-r-xr-xr-x 1 news news 11029 Mar 23 2002 mailpost
-r-xr-x--- 1 news news 39484 Mar 23 2002 makedbz
-r-xr-x--- 1 news news 163580 May 2 2002 makehistory
-r-xr-x--- 1 news news 3199 Mar 23 2002 mod-active
-r-xr-x--- 1 news news 13630 Mar 23 2002 news.daily
-r-xr-xr-x 1 news news 3364 Mar 23 2002 news2mail
-r-xr-x--- 1 news news 40968 Mar 23 2002 newsrequeue
-r-xr-xr-x 1 news news 273572 May 2 2002 nnrpd
-r-xr-xr-x 1 news news 44736 Mar 23 2002 nntpget
-r-xr-xr-x 1 news news 9894 Mar 23 2002 nntpsend
-r-xr-x--- 1 news news 3108 Mar 23 2002 ovdb_recover
lrwxrwxrwx 1 root root 12 Sep 14 2005 ovdb_upgrade -> ovdb_recover
-r-xr-x--- 1 news news 151172 May 2 2002 overchan
-r-xr-x--- 1 news news 5208 Mar 23 2002 parsecontrol
-r-xr-xr-x 1 news news 17049 Mar 23 2002 pgpverify
-r-xr-x--- 1 news news 5447 Mar 23 2002 procbatch
-r-xr-x--- 1 news news 39100 Mar 23 2002 prunehistory
-r-xr-xr-x 1 news news 15002 Mar 23 2002 pullnews
-r-xr-x--- 1 news news 4777 Mar 23 2002 rc.news
-rwsr-x--- 1 news uucp 38120 Mar 23 2002 rnews
drwxr-xr-x 2 news news 152 Sep 5 2002 rnews.libexec
-r-xr-x--- 1 news news 7101 Mar 23 2002 scanlogs
-r-xr-xr-x 1 news news 12671 Mar 23 2002 scanspool
-r-xr-xr-x 1 news news 2244 Mar 23 2002 send-ihave
-r-xr-xr-x 1 news news 1693 Mar 23 2002 send-nntp
-r-xr-xr-x 1 news news 2706 May 2 2002 send-uucp
-r-xr-xr-x 1 news news 4291 May 2 2002 send-uucp.pl
-r-xr-xr-x 1 news news 4790 May 2 2002 sendbatch
-r-xr-xr-x 1 news news 867 Mar 23 2002 sendxbatches
-r-xr-xr-x 1 news news 5836 Mar 23 2002 shlock
-r-xr-xr-x 1 news news 28776 Mar 23 2002 shrinkfile
-r-xr-xr-x 1 news news 18424 Mar 23 2002 signcontrol
-r-xr-xr-x 1 news news 2175 Mar 23 2002 simpleftp
-r-xr-xr-x 1 news news 103276 May 2 2002 sm
-rwsr-xr-- 1 root news 26120 Mar 23 2002 startinnfeed
-r-xr-x--- 1 news news 1388 Mar 23 2002 tally.control
-r-xr-x--- 1 news news 1212 Mar 23 2002 writelog
# lsattr -d /usr/lib/news
-------------- /usr/lib/news
# lsattr /usr/lib/news
-------------- /usr/lib/news/bin
-------------- /usr/lib/news/lib
-------------- /usr/lib/news/inews
-------------- /usr/lib/news/include
# lsattr /usr/lib/news/bin
-------------- /usr/lib/news/bin/sm
-------------- /usr/lib/news/bin/gup
-------------- /usr/lib/news/bin/auth
-------------- /usr/lib/news/bin/innd
-------------- /usr/lib/news/bin/expirerm
-------------- /usr/lib/news/bin/inndstar
-------------- /usr/lib/news/bin/dbprocs
/usr/lib/news/bin/control:
-------------- /usr/lib/news/bin/news.dai
-------------- /usr/lib/news/bin/ctlinnd
-------------- /usr/lib/news/bin/tally.co
-------------- /usr/lib/news/bin/sendxbat
-------------- /usr/lib/news/bin/makehist
-------------- /usr/lib/news/bin/inews
-------------- /usr/lib/news/bin/inndf
-------------- /usr/lib/news/bin/nnrpd
-------------- /usr/lib/news/bin/rnews
-------------- /usr/lib/news/bin/innrepor
-------------- /usr/lib/news/bin/pullnews
-------------- /usr/lib/news/bin/scanlogs
-------------- /usr/lib/news/bin/cnfsstat
-------------- /usr/lib/news/bin/ovdb_rec
-------------- /usr/lib/news/bin/innxbatc
-------------- /usr/lib/news/bin/prunehis
-------------- /usr/lib/news/bin/grephist
-------------- /usr/lib/news/bin/makedbz
-------------- /usr/lib/news/bin/send-nnt
-------------- /usr/lib/news/bin/send-uuc
-------------- /usr/lib/news/bin/mailpost
-------------- /usr/lib/news/bin/filechan
-------------- /usr/lib/news/bin/gpgverif
-------------- /usr/lib/news/bin/sendbatc
-------------- /usr/lib/news/bin/parsecon
-------------- /usr/lib/news/bin/pgpverif
-------------- /usr/lib/news/bin/scanspoo
-------------- /usr/lib/news/bin/fastrm
-------------- /usr/lib/news/bin/filter
-------------- /usr/lib/news/bin/convdate
-------------- /usr/lib/news/bin/expire
-------------- /usr/lib/news/bin/getlist
-------------- /usr/lib/news/bin/shrinkfi
-------------- /usr/lib/news/bin/findmiss
-------------- /usr/lib/news/bin/gupadd
-------------- /usr/lib/news/bin/mod-acti
-------------- /usr/lib/news/bin/controlc
-------------- /usr/lib/news/bin/rnews.li
-------------- /usr/lib/news/bin/overchan
-------------- /usr/lib/news/bin/cvtbatch
-------------- /usr/lib/news/bin/actsync
-------------- /usr/lib/news/bin/actmerge
-------------- /usr/lib/news/bin/nntpget
-------------- /usr/lib/news/bin/actsyncd
-------------- /usr/lib/news/bin/newsrequ
-------------- /usr/lib/news/bin/buffchan
-------------- /usr/lib/news/bin/shlock
-------------- /usr/lib/news/bin/startinn
-------------- /usr/lib/news/bin/gupverif
-------------- /usr/lib/news/bin/procbatc
-------------- /usr/lib/news/bin/gupdate
-------------- /usr/lib/news/bin/converts
-------------- /usr/lib/news/bin/send-iha
-------------- /usr/lib/news/bin/batcher
-------------- /usr/lib/news/bin/archive
-------------- /usr/lib/news/bin/simpleft
-------------- /usr/lib/news/bin/ovdb_upg
-------------- /usr/lib/news/bin/signcont
-------------- /usr/lib/news/bin/controlb
-------------- /usr/lib/news/bin/send-uuc
-------------- /usr/lib/news/bin/cnfshead
-------------- /usr/lib/news/bin/innfeed
-------------- /usr/lib/news/bin/innmail
-------------- /usr/lib/news/bin/innstat
-------------- /usr/lib/news/bin/innxmit
-------------- /usr/lib/news/bin/inncheck
-------------- /usr/lib/news/bin/writelog
-------------- /usr/lib/news/bin/news2mai
-------------- /usr/lib/news/bin/innwatch
-------------- /usr/lib/news/bin/expireov
-------------- /usr/lib/news/bin/nntpsend
-------------- /usr/lib/news/bin/rc.news
-------------- /usr/lib/news/bin/innconfv
# rpm -V inn
.......T c /etc/init.d/inn
.......T c /etc/news/.pgp/pubring.pgp
.......T c /etc/news/.profile
.......T c /etc/news/actsync.cfg
.......T c /etc/news/actsync.ign
.......T c /etc/news/buffindexed.conf
.......T c /etc/news/control.ctl
.......T c /etc/news/crontab.sample
.......T c /etc/news/cycbuff.conf
.......T c /etc/news/distrib.pats
.......T c /etc/news/distributions
.......T c /etc/news/expire.ctl
.......T c /etc/news/incoming.conf
.......T c /etc/news/inn.conf
.......T c /etc/news/innfeed.conf
.......T c /etc/news/innreport.conf
.......T c /etc/news/innwatch.ctl
.......T c /etc/news/moderators
.......T c /etc/news/motd.news
.......T c /etc/news/news2mail.cf
.......T c /etc/news/newsfeeds
.......T c /etc/news/nnrpd.track
.......T c /etc/news/nntpsend.ctl
.......T c /etc/news/ovdb.conf
.......T c /etc/news/overview.fmt
.......T c /etc/news/passwd.nntp
.......T c /etc/news/radius.conf
.......T c /etc/news/readers.conf
.......T c /etc/news/sasl.conf
.......T c /etc/news/send-uucp.cf
.......T c /etc/news/storage.conf
.......T c /etc/news/subscriptions
.......T /usr/lib/news/bin/actmerge
.......T /usr/lib/news/bin/actsync
.......T /usr/lib/news/bin/actsyncd
.......T /usr/lib/news/bin/auth/pas
.......T /usr/lib/news/bin/auth/pas
.......T /usr/lib/news/bin/auth/pas
.......T /usr/lib/news/bin/auth/res
.......T /usr/lib/news/bin/auth/res
.......T /usr/lib/news/bin/buffchan
.......T /usr/lib/news/bin/cnfshead
.......T /usr/lib/news/bin/cnfsstat
missing /usr/lib/news/bin/control
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
missing /usr/lib/news/bin/control/
.......T /usr/lib/news/bin/controlb
.......T /usr/lib/news/bin/controlc
.......T /usr/lib/news/bin/convdate
.......T /usr/lib/news/bin/converts
.......T /usr/lib/news/bin/ctlinnd
.......T /usr/lib/news/bin/dbprocs
.......T /usr/lib/news/bin/expirerm
.......T /usr/lib/news/bin/filechan
.......T c /usr/lib/news/bin/filter/I
.......T c /usr/lib/news/bin/filter/f
.......T c /usr/lib/news/bin/filter/f
.......T c /usr/lib/news/bin/filter/f
.......T c /usr/lib/news/bin/filter/f
.......T c /usr/lib/news/bin/filter/n
.......T c /usr/lib/news/bin/filter/n
.......T c /usr/lib/news/bin/filter/s
.......T c /usr/lib/news/bin/filter/s
.......T /usr/lib/news/bin/findmiss
.......T /usr/lib/news/bin/getlist
.......T /usr/lib/news/bin/gpgverif
.M.....T /usr/lib/news/bin/inews
.......T /usr/lib/news/bin/inncheck
.......T /usr/lib/news/bin/innconfv
.M.....T /usr/lib/news/bin/inndstar
.......T /usr/lib/news/bin/innmail
.......T /usr/lib/news/bin/innrepor
.......T /usr/lib/news/bin/innstat
.......T /usr/lib/news/bin/innwatch
.......T /usr/lib/news/bin/innxbatc
.......T /usr/lib/news/bin/mailpost
.......T /usr/lib/news/bin/makedbz
.......T /usr/lib/news/bin/mod-acti
.......T /usr/lib/news/bin/news.dai
.......T /usr/lib/news/bin/news2mai
.......T /usr/lib/news/bin/newsrequ
.......T /usr/lib/news/bin/nntpget
.......T /usr/lib/news/bin/nntpsend
.......T /usr/lib/news/bin/ovdb_rec
.......T /usr/lib/news/bin/parsecon
.......T /usr/lib/news/bin/pgpverif
.......T /usr/lib/news/bin/procbatc
.......T /usr/lib/news/bin/prunehis
.......T /usr/lib/news/bin/pullnews
.......T /usr/lib/news/bin/rc.news
.M.....T /usr/lib/news/bin/rnews
.......T /usr/lib/news/bin/rnews.li
.......T /usr/lib/news/bin/rnews.li
.......T /usr/lib/news/bin/rnews.li
.......T /usr/lib/news/bin/rnews.li
.......T /usr/lib/news/bin/scanlogs
.......T /usr/lib/news/bin/scanspoo
.......T /usr/lib/news/bin/send-iha
.......T /usr/lib/news/bin/send-nnt
.......T /usr/lib/news/bin/sendxbat
.......T /usr/lib/news/bin/shlock
.......T /usr/lib/news/bin/shrinkfi
.......T /usr/lib/news/bin/signcont
.......T /usr/lib/news/bin/simpleft
.M.....T /usr/lib/news/bin/startinn
.......T /usr/lib/news/bin/tally.co
.......T /usr/lib/news/bin/writelog
.......T /usr/lib/news/lib/docheckg
.......T /usr/lib/news/lib/innshell
.......T /usr/lib/news/lib/innshell
.......T /usr/lib/news/lib/innshell
..5....T /usr/lib/news/lib/libinn.a
.......T c /var/lib/news/active
.......T c /var/lib/news/active.times
.......T c /var/lib/news/history
.......T c /var/lib/news/history.dir
.......T c /var/lib/news/history.pag
.......T c /var/lib/news/newsgroups
missing /var/log/news/news
.M...... /var/log/news/news.crit
.M...... /var/log/news/news.err
.M...... /var/log/news/news.notice
# id
uid=0(root) gid=0(root) groups=0(root),1(bin),14(u
# cat /etc/passwd
root:x:0:0:root:/root:/bin
bin:x:1:1:bin:/bin:/bin/ba
daemon:x:2:2:Daemon:/sbin:
lp:x:4:7:Printing daemon:/var/spool/lpd:/bin
mail:x:8:12:Mailer daemon:/var/spool/clientmq
games:x:12:100:Games account:/var/games:/bin/ba
at:x:25:25:Batch jobs daemon:/var/spool/atjobs:/
postgres:x:26:2:Postgres database admin:/var/lib/pgsql:/bin/
mdom:x:28:28:Mailing list agent:/usr/lib/majordomo:/
wwwrun:x:30:65534:WWW daemon apache:/var/lib/wwwrun:/bi
squid:x:31:65534:WWW proxy squid:/var/squid:/bin/bash
fax:x:33:14:Facsimile agent:/var/spool/fax:/bin/
gnats:x:34:65534:Gnats GNU backtracking system:/usr/lib/gnats:/bin
adabas:x:36:100:Adabas-D database admin:/usr/lib/adabas:/bin
amanda:x:37:6:Amanda admin:/var/lib/amanda:/bin
irc:x:39:65534:IRC daemon:/usr/lib/ircd:/bin/
ftp:x:40:2:FTP account:/usr/local/ftp:/bin/bash
firewall:x:41:31:Firewall account:/var/lib/firewall:
named:x:44:44:Nameserver daemon:/var/named:/bin/bas
fnet:x:49:14:FidoNet account:/var/spool/fnet:/b
gdm:x:50:15:Gnome Display Manager daemon:/var/lib/gdm:/bin/b
postfix:x:51:51:Postfix daemon:/var/spool/postfix:
cyrus:x:96:12:IMAP daemon:/usr/lib/cyrus:/bin
oracle:x:59:54:Oracle database admin:/opt/oracle:/bin/bas
mysql:x:60:2:MySQL database admin:/var/lib/mysql:/bin/
dpbox:x:61:56:DpBox account:/var/spool/dpbox:/
ingres:x:62:3:Ingres database admin:/opt/tngfw/ingres:/b
zope:x:64:2:Zope daemon:/var/lib/zope:/bin/
vscan:x:65:65534:Vscan account:/var/spool/vscan:/
wnn:x:66:100:Wnn system account:/var/lib/wnn:/bin/
pop:x:67:100:POP admin:/var/lib/pop:/bin/fa
perforce:x:68:60:Perfoce admin:/var/lib/perforce:/b
sapdb:x:69:61:SAPDB demo account:/var/opt/sapdb:/bi
db4web:x:70:100:DB4Web account:/opt/db4web:/bin/b
nobody:x:65534:65533:nobod
robert:x:500:100:Robert Schelander:/home/robert:/b
man:x:13:62:Manual pages viewer:/var/cache/man:/bin
news:x:9:13:News system:/etc/news:/bin/bash
sshd:x:74:65:SSH daemon:/var/lib/sshd:/bin/
uucp:x:10:14:Unix-to-Unix CoPy system:/etc/uucp:/bin/bash
#
ASKER
just assigned points to all that tried to help
maybe there is no solution because file system was corrupt
the system was not worth to invest too much time
maybe there is no solution because file system was corrupt
the system was not worth to invest too much time
ASKER
# whoami
root
# ls -l /usr/lib/news/bin/control
ls: /usr/lib/news/bin/control:
# lsattr /usr/lib/news/bin/control
lsattr: Permission denied while trying to stat /usr/lib/news/bin/control