D. D. Brierton wrote:
On Sat, 2006-03-18 at 10:05 +0000, Chris Jones wrote:
When running rkhunter (1.2.8) on FC4 I get these warnings
Scanning for hidden files... [ Warning! ]
---------------
/dev/.udevdb /usr/share/man/man1/..1.gz /etc/.pwd.lock
---------------
Please inspect: /dev/.udevdb (directory) /usr/share/man/man1/..1.gz (gzip
compressed data, from Unix, max compression)
I'm almost certain you shouldn't. I also get the same warnings. One
thing I would like to know is how to tell rkhunter that these files are
okay, so it would stop sending me an email everyday telling me my
machine might be infected.
You can stop rkhunter from checking these by editing /etc/rkhunter.conf
Un-comment the related ALLOWHIDDENDIR and ALLOWHIDDENFILE lines.
Craig
