On 12/04/2013 02:44 PM, Marcus Meissner wrote:
> On Wed, Dec 04, 2013 at 12:13:05PM +0200, ellanios82 wrote:
>> Hello List
>>
>> - further, rkhunter mails to root :
>>
>> " Please inspect this machine, because it may be infected."
>>
>> ...............................
>>
>> rkhunter produces these warnings :
>> ____________________
>>
>> "Warning: Package manager verification has failed:
>> File: /etc/rkhunter.conf
>> The file hash value has changed
>> The file size has changed
>> The file modification time has changed"
>>
>> .............
>>
>> - are there legitimate reasons why above changes have taken place
>> . . . could this be a false alarm ?
> If you edited this specific configuration file, it is not a problem.
______________
Thank you Marcus : perhaps it is a problem : because 'midnight
commander' shows date November 27 , as file-date [presumably when last
altered ?
............
the full output i am getting is :
" Warning: Package manager verification has failed:
File: /etc/rkhunter.conf
The file hash value has changed
The file size has changed
The file modification time has changed
Warning: The SSH configuration option 'Protocol' has not been set.
The default value may be '2,1', to allow the use of protocol
version 1.
Warning: Suspicious file types found in /dev:
/dev/shm/com.google.Chrome.shmem.A2128B79EDC81A503E4CD6DE6DBE0741C3663744._service_shmem:
data
Warning: Hidden file found: /dev/.udev: symbolic link to `/run/udev' "
...................
thank you
------------------------------------------------------------------------------
Sponsored by Intel(R) XDK
Develop, test and display web and hybrid apps with a single code base.
Download it for free now!
http://pubads.g.doubleclick.net/gampad/clk?id=111408631&iu=/4140/ostg.clktrk
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
