Hello all, I have just upgraded from F9 to F11 and using the same RKH version as I had on F9 (1.3.4) I now get the following warnings.
Warning: The following processes are using deleted files:
Process: /usr/libexec/mysqld PID: 1651
File: /tmp/ib7hmLbP
Process: /bin/mailx PID: 14068 File: /tmp/RstQIvtq
Warning: Hidden file found: /usr/bin/.ssh.hmac: ASCII text
Warning: Hidden file found: /usr/bin/.fipscheck.hmac: ASCII text
Warning: Hidden file found: /usr/bin/.ssh-keyscan.hmac: ASCII text
Warning: Hidden file found: /usr/bin/.ssh-keygen.hmac: ASCII text
Warning: Hidden file found: /usr/bin/.ssh-add.hmac: ASCII text
Warning: Hidden file found: /usr/bin/.ssh-agent.hmac: ASCII text
Warning: Hidden file found: /usr/sbin/.sshd.hmac: ASCII text
I know that I can whitelist them all in rkhunter.conf but I wanted to
ask if these are normal?
In particular, on F9 mysqld was in /usr/sbin/mysqld and I'd never had to
whitelist mailx before...
Thanks for any suggestions...
Mark
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
