All, I had a new client call me today. They believe their system has had an intruder in it. Possibly, just a worm/robot. Possibly a human. (The system is now offline.) I believe it's running an unpatched version of SLES 9.0 I'd like to verify if any of the executables have been altered from the beginning. Is there a way to have RPM / Yast do that? Thanks Greg -- Greg Freemyer Litigation Triage Solutions Specialist http://www.linkedin.com/in/gregfreemyer First 99 Days Litigation White Paper - http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf The Norcross Group The Intersection of Evidence & Technology http://www.norcrossgroup.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org