<div dir="ltr"> <div class="gmail_quote">On Sat, Aug 23, 2008 at 12:51 PM, Brian McKee <<a href="mailto:brian.mckee@gmail.com">brian.mckee@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Fri, Aug 22, 2008 at 12:09 PM, Ashley Benton <<a href="mailto:chuaukantli@gmail.com">chuaukantli@gmail.com</a>> wrote: > Hi, > Yesterday I used chm2pdf to be able to read a document. I had this strange > message rm: permission to /root and every other system folders. I answered > no Were you running the program as root or via sudo? Did you start it from the command line? It might be enlightening to review your .bash_history file. A find command would show new files since yesterday, but wouldn't show deletions etc.... rootkithu hunter and others would spot changes if you'd been running those programs *before* you had a problem. Checking after the fact is a chicken-and-egg problem, since you can't trust the system to verify itself if the system is untrustworthy. Brian</blockquote><div> Even though its after the fact, if you installed samhain, it would at least alert you whenever a system file changed. I'm not sure if it can be configured to alert whenever *any* file changed,though. But it would be a good app to have running if you've ever wondered which files are changing in the system. Jack </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> -- ubuntu-users mailing list <a href="mailto:ubuntu-users@lists.ubuntu.com">ubuntu-users@lists.ubuntu.com</a> Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-users" target="_blank">https://lists.ubuntu.com/mailman/listinfo/ubuntu-users</a> </blockquote></div> </div>