Michael Lazin via plug on 27 Dec 2022 11:27:03 -0800


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Possible Break in on Arch Linux Systems:

That is the gpg key for your package manager.  I don't think that should change.  Try installing rkhunter and running "rkhunter --scan" as root.  It will tell you if other files may have been modified.

Thanks,

Michael 

On Tue, Dec 27, 2022, 1:44 PM LeRoy Cressy via plug <plug@lists.phillylinux.org> wrote:
I do a daily backup which checks for any changes in /etc and other
directories that should not change unless you have done a backup.  On
Christmas Day someone or something changed the following files:

/etc/pacman.d/gnupg/pubring.gpg
/etc/pacman.d/gnupg/pubring.gpg~
/etc/pacman.d/gnupg/pubring.gpg.tmp
/etc/pacman.d/gnupg/trustdb.gpg

I rebuilt my repositories with pacman -Syy
I reinstalled archlinux-keyring

I am familiar with the shenanigans  of cups changing their /etc files
daily, but this is a first for me.

I'm posting this as a warning of a possible break-in on Arch Linux
systems.

--
  Rev. LeRoy D. Cressy
  mailto:rev.cressy@prontonmail.com

   /\_/\
  ( o.o )
   > ^ <

Cell Phone: 267-668-9686

GnuPG Fingerprint:
D234 65D6 2822 211B F82F  A6CA B332 4CC8 ACBF D200

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)

You can find me on the following:

Telegram:
     (My Main Channel)
        https://t.me/RevLeRoy
     (Send Me A Message)
        https://t.me/LeRoy_Cressy
     (My Videos)
        https://t.me/rev_cressy_videos

Video:
     ugetube.com:
        https://ugetube.com/@the-rev
     bitchute.com:
        https://www.bitchute.com/channel/the-rev/
     brighteon.com:
        https://www.brighteon.com/channels/therev
     rumble.com:
        https://rumble.com/user/lrcressy
     odysee.com:
        https://odysee.com/@the-rev


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug