Hi,

09.06.2009 09:03, Peter wrote:
> Hi
> I use the verify function to detect for file tampering.
> I get the following:
> 
> 29-May 05:05 box-dir JobId 591: File: /var/spool/postfix/lib/libnss_nis.so.2
> 29-May 05:05 box-dir JobId 591:       st_ino   differ. Cat: 850339 File: 
> 850337
> 
> 
> What exactly does this mean ? What does st_ino refer to ?

st_ino is the file system stat inode number. This is, kind of, the 
position in the file system where the file's meta data like 
permissions, name, and so on are stored.

If that changed, it usually indicates the file has been replaced - 
might have happened during a system update, for example.

Usually, you would use something like 'rpm -Vf 
/var/spool/postfix/lib/libnss_nis.so.2' to see if the file is in the 
state the package it belongs to deployed it.

Arno

> Thanks for your help
> vmail
> 
> 
> 
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables unlimited
> royalty-free distribution of the report engine for externally facing 
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users
> 

-- 
Arno Lehmann
IT-Service Lehmann
Sandstr. 6, 49080 Osnabrück
www.its-lehmann.de

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users