Hello suse-security, I would like to ask is there any tool (semi-automated preferable), to chek binaries md5(?)sums? Kind of basic shell script witch has original sum list of aaa_base binaries, and then goes for all of them and cheks for conforming? As for now i see only way -> download list from SuSE FTP server or copy from CD and then go to it manualy. However i feel like i`m not first person who has feeling like its time to look for an rootkit and think that there is an tool made to make lifes easyier... Surely there is nothing wrong with cheking one or two binaries, but i`m paranoind enough to chek all base binaries. Besides i have 3 SuSE distributions to check, so i will need at least 3 binaries lists I found "Linux rootkit detector" on sourceforge, however its still in beta, and looks for differences between ps() output and /proc table, not cheking binaries by them self. Any references (to sums list of 6.1, 6.3 and 7.1 or to rootkit realated topics) and sugestions would be very welcome :-) Thanks! -- Will you help us, Mulder? Best regards, Gediminas mailto:lists@kryptis.lt