1

Suspicious file - /usr/lib/libresolv32.so

view story
linux-howto

http://ubuntuforums.org – Does anyone else have this file? If so, can you tell me what's in it? EDIT: To elaborate, I recently noticed an odd message after upgrading certain packages with apt-get (that run /sbin/ldconfig.real) . /sbin/ldconfig.real: /usr/lib/libresolv32.so is not an ELF file This is a text file on my system(s) and it contains plain text passwords. I used auditd to investigate what was writing to the file. The sshd process writes the user and password to the file upon successful login ... type=SYSCALL msg=audit(1374292885.351:22): arch=c000003e syscall=2 success=yes exit=4 a0=45aa89 a1=441 a2=1b (Hardware)