Brian,

----- Original Message ----- 
From: "Brian McKee" <[EMAIL PROTECTED]>
To: "Mike Blezien" <[EMAIL PROTECTED]>
Cc: <rkhunter-users@lists.sourceforge.net>
Sent: Tuesday, September 25, 2007 8:14 AM
Subject: Re: [Rkhunter-users] Warning Message


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Mike
> What's 'special' about the root account is not it's name, but the  fact that 
> it's UID number is 0
> Any account with a UID of 0 owns the system and has full rights to 
> everything.
>
> If I am reading your warning right (I haven't seen it before) and  it's 
> accurate, it's saying that an account with the name of # exists  on your 
> system.
> It's a warning because most systems do not have more than one root  account.
>
> If you didn't intend this, (and I can't imagine a legitimate reason  for it) 
> then it's certainly something you'd best investigate right away!
> Maybe try 'cat /etc/passwd' and see what it's showing you.  I'm not  the best 
> person (and this isn't the right list) to help you with that.
>
> If it's an issue with the rkhunter software then it would be an  important 
> bug 
> to fix....
>
> Brian
>
> On 25-Sep-07, at 8:14 AM, Mike Blezien wrote:
>
>> Hello,
>>
>> what exactly does this warning mean:
>>
>> Warning: Account '#' is root equivalent (UID = 0)
>>
>> why is this a "Warning" ??

I think I located the problem. In the passwd file was a line commented out with 
the # sign which I assume is what Rkhunter was reading and causing the warning 
message:

# root:x:0:0:,,:/root:/bin/bash

I removed it and we'll see what happens.

Thx's


Mike(mickalo)Blezien
===============================
Thunder Rain Internet Publishing
Providing Internet Solution that Work
http://www.thunder-rain.com
===============================


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to