rkhunter warnings

[Craig Goodyear]

D. D. Brierton wrote:
> On Sat, 2006-03-18 at 10:05 +0000, Chris Jones wrote:
> 
>>When running rkhunter (1.2.8) on FC4 I get these warnings
>>
>>   Scanning for hidden files...  [ Warning! ]
>>---------------
>> /dev/.udevdb  /usr/share/man/man1/..1.gz  /etc/.pwd.lock 
>>---------------
>>Please inspect:  /dev/.udevdb (directory)  /usr/share/man/man1/..1.gz (gzip 
>>compressed data, from Unix, max compression)
>>
> 
> I'm almost certain you shouldn't. I also get the same warnings. One
> thing I would like to know is how to tell rkhunter that these files are
> okay, so it would stop sending me an email everyday telling me my
> machine might be infected.
>


You can stop rkhunter from checking these by editing /etc/rkhunter.conf
Un-comment the related ALLOWHIDDENDIR and ALLOWHIDDENFILE lines.

Craig