Your message dated Sat, 01 Oct 2005 14:39:48 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Use ALLOWHIDDEN* options
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 29 Sep 2005 09:55:21 +0000
>From [EMAIL PROTECTED] Thu Sep 29 02:55:21 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mx01.qsc.de [213.148.129.14]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1EKv8L-0004To-00; Thu, 29 Sep 2005 02:55:21 -0700
Received: from port-212-202-72-16.dynamic.qsc.de ([212.202.72.16]
helo=treasure.calvinsplayground.de)
by mx01.qsc.de with smtp (Exim 3.35 #1)
id 1EKv7w-0002vm-00
for [EMAIL PROTECTED]; Thu, 29 Sep 2005 11:54:56 +0200
Received: (qmail 17359 invoked by uid 1000); 29 Sep 2005 09:55:50 -0000
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Bastian Kleineidam <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: rkhunter: reports warnings on udev-specific /dev directories
X-Mailer: reportbug 3.17
Date: Thu, 29 Sep 2005 11:55:49 +0200
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Package: rkhunter
Version: 1.2.7-13
Severity: minor
Hi,
when running rkhunter I get warnings about the (hidden) directories
/dev/.static and /dev/.udevdb.
Both are normal when udev is installed and started.
I suggest adding the above directories to a whitelist for hidden
/dev directories when udev is used (eg. by checking if both the udev
package is installed, and if "udevd" is in the process list).
Regards,
Bastian
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (900, 'unstable'), (800, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13-ck6-treasure1
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
Versions of packages rkhunter depends on:
ii debconf [debconf 1.4.58 Debian configuration management sy
ii file 4.12-1 Determines file type using "magic"
ii mailx 1:8.1.2-0.20050715cvs-1 A simple mail user agent
ii wget 1.10.1-1 retrieves files from the web
rkhunter recommends no packages.
-- debconf information:
* rkhunter/cron_daily_run: true
* rkhunter/cron_db_update: true
---------------------------------------
Received: (at 330688-done) by bugs.debian.org; 1 Oct 2005 12:40:28 +0000
>From [EMAIL PROTECTED] Sat Oct 01 05:40:27 2005
Return-path: <[EMAIL PROTECTED]>
Received: from smtp7.wanadoo.fr [193.252.22.24]
by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
id 1ELgfD-000804-00; Sat, 01 Oct 2005 05:40:27 -0700
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf0707.wanadoo.fr (SMTP Server) with ESMTP id 98CED18000A5
for <[EMAIL PROTECTED]>; Sat, 1 Oct 2005 14:39:56 +0200 (CEST)
Received: from venus.kirya.net (ANancy-154-1-59-231.w83-196.abo.wanadoo.fr
[83.196.185.231])
by mwinf0707.wanadoo.fr (SMTP Server) with ESMTP id 7B88218000A0
for <[EMAIL PROTECTED]>; Sat, 1 Oct 2005 14:39:56 +0200 (CEST)
X-ME-UUID: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1])
by venus.kirya.net (Postfix) with ESMTP id 8E5C6873D7
for <[EMAIL PROTECTED]>; Sat, 1 Oct 2005 14:39:55 +0200 (CEST)
Received: from athena.kirya.net (athena.kirya.net [192.168.1.51])
by venus.kirya.net (Postfix) with ESMTP id 82ADF873D4
for <[EMAIL PROTECTED]>; Sat, 1 Oct 2005 14:39:49 +0200 (CEST)
Subject: Use ALLOWHIDDEN* options
From: Julien Valroff <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="=-oEVJYBbtBsdMKQWmWx8L"
Date: Sat, 01 Oct 2005 14:39:48 +0200
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
X-Mailer: Evolution 2.2.3
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at kirya.net
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
--=-oEVJYBbtBsdMKQWmWx8L
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hi,
You can specify allowed hidden files and directories
in /etc/rkhunter.conf to avoid such warnings (see ALLOWHIDDENFILES and
ALLOWHIDDENDIRS options)
This is the user's reponsibility to change such configuration options,
as this could lead to security leaks.
Anyway, I will add a note in README.Debian about these hidden
directories, as many Debian users might get these warnings.
Cheers,
Julien
--=-oEVJYBbtBsdMKQWmWx8L
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQBDPoOUaxDuRdoK7O0RAmxMAJ43NsuiNm0W0bWQteJfFB3GssmDrQCfZYrJ
FIekciOcgeBUeHMp8tL2fTc=
=hmOU
-----END PGP SIGNATURE-----
--=-oEVJYBbtBsdMKQWmWx8L--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
