Does this mean that my fedora x86_64 server has been rooted ?

[Paul Howarth]

Vikas Kedia wrote:
> [root at mc18 security]# grep -ir "md5sum" *
> 
> afterfreshinstall md5:5808c1a4fb3b452dcfe60ee30f3bf7be
>  usr/bin/md5sum
> 
> afteryumupdate md5:5808c1a4fb3b452dcfe60ee30f3bf7be 
> usr/bin/md5sum
> 
> after 2 hours on the net and installing webmin / pgsql
> / mysql
> 
> [root at mc18 security]# md5sum /usr/bin/md5sum
> 181c520fe58c1c3546c0fcd4cd51f80a  /usr/bin/md5sum
> 
> Why did the md5sum value change ?

This is probably due to prelink. See /usr/share/doc/prelink-*/prelink.pdf

Paul.