RKHUNTER reporting on my system
kles koe
kleskoe at hotmail.com
Wed Apr 12 20:23:22 UTC 2006
why don't you just ask the author of rkhunter to update the hashes for these
packges?
i think i did once and it was fixed within a few days.
>From: "Nils Breunese (Lemonbit Internet)" <nils at lemonbit.nl>
>Reply-To: Discussion of the Fedora Legacy Project
><fedora-legacy-list at redhat.com>
>To: Discussion of the Fedora Legacy Project <fedora-legacy-list at redhat.com>
>Subject: Re: RKHUNTER reporting on my system
>Date: Wed, 12 Apr 2006 21:09:45 +0200
>
>Max Pyziur wrote:
>
>>>I have an FC2 system which rkhunter reports some suspicious
>>>files. In particular, during the MD5 hash scan, it reports
>>>
>>> /bin/dmesg
>>> /bin/kill
>>> /bin/login
>>> /bin/mount
>>> /usr/bin/kill
>>
>>I run FC2 and have a similar issue. I've run rkhunter --update many
>>times
>>in the hopes of updating the installed database to resolve this problem.
>>Is there a way of updating the the FC2-related rkhunter database in order
>>to resolve this?
>
>I experience the same (for the same files). I tried installing an older
>version of util-linux and everything was fine again. I updated util-linux
>again and it didn't recognize these files again. So I wouldn't be to
>worried. If rkhunter doesn't recognize certain files you're supposed to
>report this on the rkhunter website. I reported this issue twice already,
>but apparently no one has looked into this.
>
>>>It also doesn't like the fact that root can log in, and that
>>>SSHv1 is permitted to run.
>
>Rightly so. Do not allow these things or change /etc/rkhunter.conf to not
>let it warn you about these things.
>
>Nils.
>
>--
>fedora-legacy-list mailing list
>fedora-legacy-list at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-legacy-list
_________________________________________________________________
Dont just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/
More information about the fedora-legacy-list
mailing list