On Wed, 2009-12-30 at 17:38 +0100, xwang1...@email.it wrote:
> Hi to all,
> I would like to know why I otai the following warning:
> 
> [17:35:52] Performing filesystem checks
> [17:35:52] Info: Starting test name 'filesystem'
> [17:35:52] Info: SCAN_MODE_DEV set to 'THOROUGH'
> [17:35:52] Info: Found file '/dev/shm/pulse-shm-2099550880': it is 
> whitelisted.
> [17:35:52]   Checking /dev for suspicious file types         [ Warning ]
> [17:35:52] Warning: Suspicious file types found in /dev:
> [17:35:52]          /dev/shm/usb-0000:00:1d.7-5:CNF7246: data
> 
> even if I've whitelisted it in the configuration file:
> 

> ALLOWDEVFILE=/dev/shm/usb-0000:00:1d.7-5:CNF7246
> ALLOWDEVFILE=/dev/shm/pulse-shm-*
>
It's a bug caused by the filename having colons (:) in it. We will need
to look and see how we can get around that.

You should be able to whitelist the file using either:

   ALLOWDEVFILE=/dev/shm/usb-0000

or something like

   ALLOWDEVFILE=/dev/shm/usb-*





John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to