[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]

Re: rkhunter

From: Colin J Thomson <colin g6avk demon co uk>
To: fedora-list redhat com
Cc:
Subject: Re: rkhunter
Date: Tue, 14 Mar 2006 21:11:21 +0000

Hi,

On Tuesday 14 March 2006 03:50, François Patte wrote:

> Just update rkhunter to rkhunter-1.2.8-1.fc4 and now it bores me with
> mails:
>
> "Please inspect this machine, because it can be infected"
>
> Ok! I just run rkhunter manually: absolutely no warning!!!!
>
> I checked with chkrootkit : no warning....

rkhunter is complaining about /dev/.udevdb and /usr/share/man/man1/..1.gz 
early versions just used to give you a warning to inspect these DIR's.

in /etc/rkhunter.conf uncomment these lines:
ALLOWHIDDENFILE=/usr/share/man/man1/..1.gz
ALLOWHIDDENDIR=/dev/.udevdb

HTH

-Colin
-- 
Fedora Core 4, Custom Built Kernel 2.6.15-ck7
KDE-Redhat-3.5.1-2.4.fc4.kde
Registered Linux user number #342953

References:
- rkhunter
  - From: François Patte

[Date Prev][Date Next] [Thread Prev][Thread Next] [Thread Index] [Date Index] [Author Index]