Re: [Rkhunter-users] Hidden files in Fedora 11
On Thu, Aug 13, 2009 at 4:34 PM, Arthur Dentmisc.li...@blueyonder.co.uk wrote: Hello all, I have just upgraded from F9 to F11 and using the same RKH version as I had on F9 (1.3.4) I now get the following warnings. Warning: The following processes are using deleted files: Process: /usr/libexec/mysqld PID: 1651 File: /tmp/ib7hmLbP Hello Arthur, Some time ago, I also noticed the mysqld process using deleted files in /tmp/. Though I cannot find anything authoritative on this behavior ( http://alexlurthu.wordpress.com/2008/12/29/mysql-and-disk-space-anomoloy/#comments or http://www.mysqlperformanceblog.com/2008/10/31/full-innodb-status/ ), I can confirm that fresh mysql-server 5.0 and 5.1 installs are also doing this. So I guess it's normal behavior, even if nobody says it explicitly. Maybe a glimpse in the sources would explain, but my (lack of) coding skills don't allow me to do it :) HTH Florin -- www.flo.ro -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
[Rkhunter-users] Hidden files in Fedora 11
Hello all, I have just upgraded from F9 to F11 and using the same RKH version as I had on F9 (1.3.4) I now get the following warnings. Warning: The following processes are using deleted files: Process: /usr/libexec/mysqldPID: 1651 File: /tmp/ib7hmLbP Process: /bin/mailxPID: 14068File: /tmp/RstQIvtq Warning: Hidden file found: /usr/bin/.ssh.hmac: ASCII text Warning: Hidden file found: /usr/bin/.fipscheck.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-keyscan.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-keygen.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-add.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-agent.hmac: ASCII text Warning: Hidden file found: /usr/sbin/.sshd.hmac: ASCII text I know that I can whitelist them all in rkhunter.conf but I wanted to ask if these are normal? In particular, on F9 mysqld was in /usr/sbin/mysqld and I'd never had to whitelist mailx before... Thanks for any suggestions... Mark signature.asc Description: This is a digitally signed message part -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
Re: [Rkhunter-users] Hidden files in Fedora 11
On Thu, 2009-08-13 at 14:34 +0100, Arthur Dent wrote: Warning: Hidden file found: /usr/bin/.ssh.hmac: ASCII text Warning: Hidden file found: /usr/bin/.fipscheck.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-keyscan.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-keygen.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-add.hmac: ASCII text Warning: Hidden file found: /usr/bin/.ssh-agent.hmac: ASCII text Warning: Hidden file found: /usr/sbin/.sshd.hmac: ASCII text I have these on my F11 system. No idea about the mysqld temporary files. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001 -- Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july ___ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
