RE: HELP!!!! /bin/mail

[aljuhani <aljuhani zajil net>]

/bin/mail is a binary file.  If you have your OS RPMs run the following 
command:

rpm -Fvh

This command if applied to all RPM stored in a directory or on OS CD, It will 
update ONLY the installed RPMs and will not change any system configs or file 
structures you have.

The "echo" command is used to insert a comment/data to a file, so you have 
insterted somewhere in the mail binary file that line.

Good Practice is to always safe your binary files to a floppy.  It might be 
needed also if someone breaks into your box and attach some rootkit to one of 
your binaries to spy on your activities and passwords.

Some tools that help in checking binary files integerity is chkrootkit 
(http://www.chkrootkit.org) or by using MD5 checksums to comapre with 
originals.

To install chkrootkit, here is how:

1. First make a directory for chkrootkit:

cd /home
mkdir tools
cd tools

I think the latest version is 0.38

wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz
tar -zxvf chkrootkit.tar.gz

cd chkrootkit-0.38/

make sense

-----

Now you have chkrootkit installed under /home/tools/chkrookit-0.38
To run just type at shell prompt
./chkrootkit

It is better to make a cron job that runs ckrootkit and sends you by email the 
results.

Regards,

Al-Juhani
aljuhani zajil net



>===== Original Message From redhat-list redhat com =====

I accidentally fat fingered my keyboard last week
at command with su I typed:
echo mail>john domain com

now anytime my scripts call the /bin/mail I get a out of virtual memory
error?????


John