Hi mailing list,
at my company we use rkhunter on some webserver. It runs once every
day in the morning as part of a nagios check.
Yesterday a new user was added on the server and rkhunter threw a
warning about the passwd and group file as it should.
To be sure there is no real threat but only the new user, I ran
rkhunter again, but this time, it doesn't complain about the new
user. It said that all things ar well. I'm sure no script run a
--produpd, so where should I look for this else?
If you need more informations, feel free to ask.
Regards
Silvio Knizek
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
