Your message dated Sun, 26 Apr 2015 23:12:10 +0000 with message-id <[email protected]> and subject line Bug#762877: fixed in rkhunter 1.4.2-1 has caused the Debian Bug report #762877, regarding Warning: Hidden directory found: /dev/.lxc to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 762877: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762877 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: rkhunter Version: 1.4.0-3 Severity: normal Dear Maintainer, I'm getting daily rkhunter cron jobs reports with the message: """ Warning: Hidden directory found: /dev/.lxc """ AFAIN I have just beeing updating the system, I've checked the config files but I haven't found any ALLOWDEVS ... or ALLOWHIDDEN... with that directory name in it (no hint). IHMO if that's normal it should not be a warning. Thanks in advance! xiscu -- System Information: Debian Release: jessie/sid Architecture: amd64 (x86_64) Kernel: Linux 3.14-2-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rkhunter depends on: ii binutils 2.24.51.20140903-1 ii debconf [debconf-2.0] 1.5.53 ii file 1:5.19-2 ii net-tools 1.60-26 ii perl 5.20.0-6 ii ucf 3.0030 Versions of packages rkhunter recommends: ii curl 7.38.0-1 ii exim4-daemon-light [mail-transport-agent] 4.84-2 ii iproute 1:3.16.0-2 ii lsof 4.86+dfsg-1 ii unhide 20121229-1 ii wget 1.15-1+b1 Versions of packages rkhunter suggests: pn bsd-mailx | mailutils | heirloom-mailx | mailx <none> pn libdigest-whirlpool-perl <none> ii liburi-perl 1.64-1 ii libwww-perl 6.08-1 ii powermgmt-base 1.31+nmu1 ii tripwire 2.4.2.2-4 -- Configuration Files: /etc/default/rkhunter changed: CRON_DAILY_RUN="yes" CRON_DB_UPDATE="yes" DB_UPDATE_EMAIL="false" REPORT_EMAIL="root" APT_AUTOGEN="" NICE="0" RUN_CHECK_ON_BATTERY="false" /etc/rkhunter.conf changed: ROTATE_MIRRORS=1 UPDATE_MIRRORS=1 MIRRORS_MODE=0 MAIL-ON-WARNING="" MAIL_CMD=mail -s "[rkhunter] Warnings found for ${HOST_NAME}" TMPDIR=/var/lib/rkhunter/tmp DBDIR=/var/lib/rkhunter/db SCRIPTDIR=/usr/share/rkhunter/scripts UPDATE_LANG="" LOGFILE=/var/log/rkhunter.log APPEND_LOG=0 COPY_LOG_ON_ERROR=0 COLOR_SET2=0 AUTO_X_DETECT=1 WHITELISTED_IS_WHITE=0 ALLOW_SSH_ROOT_USER=no ALLOW_SSH_PROT_V1=0 ENABLE_TESTS="all" DISABLE_TESTS="suspscan hidden_procs deleted_files packet_cap_apps apps" SCRIPTWHITELIST=/bin/egrep SCRIPTWHITELIST=/bin/fgrep SCRIPTWHITELIST=/bin/which SCRIPTWHITELIST=/usr/bin/groups SCRIPTWHITELIST=/usr/bin/ldd SCRIPTWHITELIST=/usr/bin/lwp-request SCRIPTWHITELIST=/usr/sbin/adduser SCRIPTWHITELIST=/usr/sbin/prelink IMMUTABLE_SET=0 PHALANX2_DIRTEST=0 ALLOWDEVFILE="/dev/shm/pulse-shm-*" ALLOW_SYSLOG_REMOTE_LOGGING=0 SUSPSCAN_TEMP=/dev/shm SUSPSCAN_MAXSIZE=10240000 SUSPSCAN_THRESH=200 USE_LOCKING=0 LOCK_TIMEOUT=300 SHOW_LOCK_MSGS=1 DISABLE_UNHIDE=0 INSTALLDIR="/usr" -- debconf information: rkhunter/cron_db_update: yes rkhunter/apt_autogen: rkhunter/cron_daily_run: yes
--- End Message ---
--- Begin Message ---Source: rkhunter Source-Version: 1.4.2-1 We believe that the bug you reported is fixed in the latest version of rkhunter, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Francois Marier <[email protected]> (supplier of updated rkhunter package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 25 Apr 2015 23:44:41 +1200 Source: rkhunter Binary: rkhunter Architecture: source all Version: 1.4.2-1 Distribution: unstable Urgency: medium Maintainer: Debian Forensics <[email protected]> Changed-By: Francois Marier <[email protected]> Description: rkhunter - rootkit, backdoor, sniffer and exploit scanner Closes: 710582 753717 762877 765351 765898 765901 765912 768396 771477 771620 773974 779702 780903 783069 Changes: rkhunter (1.4.2-1) unstable; urgency=medium . * Make myself the uploader * Acknowledge my own NMUs (closes: #765351, #765912, #768396, #771477) . * Recommend both unhide and unhide.rb (closes: #765901) * Recommend iproute2 instead of iproute (closes: #753717) * Drop recommends for test browsers (closes: #710582) * Promote lsof to depends and mailx to recommends * Drop tripwire and libdigest-whirlpool-perl from suggests . * Better default configuration (closes: #765898) * Comment out lwp-request in the config file (closes: #773974, #783069) * Fix config entries for etckeeper (closes: #779702) * Fix NONE/none and ALL/all mess in config file (closes: #780903) * Suggest "ALLOWHIDDENDIR=/dev/.lxc" in config file (closes: #762877) . * Use $(hostname) instead of $(hostname -f) in emails (LP: #973490) * Fix default values of cron vars in /etc/default/rkhunter (LP: #1011151) * Remove trailing whitespace in /etc/default/rkhunter (closes: #771620) . * Bump Standards-Version up to 3.9.6 * Bump debhelper compatibility to 9 * Update lintian overrides to cover all new files * Use canonical VCS URLs * Fix blank line in package description * Update hash algorithm in package description * Add logcheck rules to filter out expected syslog messages Checksums-Sha1: eb4bd5046b19e53d3e2c9e30872dd76f68b77965 2026 rkhunter_1.4.2-1.dsc 6017179edf898141f06a430c67956109b69b3c39 26680 rkhunter_1.4.2-1.debian.tar.xz 0cf7162775c80e711a0b4b824e26eede7c458374 238290 rkhunter_1.4.2-1_all.deb Checksums-Sha256: 9146bacf3a34cde05ccbfc967a16f438f2e3955a45b17a5fee78adb6793d15b4 2026 rkhunter_1.4.2-1.dsc 59f2fa2c9d720c21480d2c2d684fe63ecda60e4bb77305bbc2c5e57754192def 26680 rkhunter_1.4.2-1.debian.tar.xz 87eb0779689ebb7a3e5bcd4d14b776685064d0cc7733385f3aa3bd6f0cbcccfe 238290 rkhunter_1.4.2-1_all.deb Files: 239fd72713587b6130e8aa3277ef9502 2026 admin optional rkhunter_1.4.2-1.dsc 334cf8938eba67c8efdc25e317eb0ad8 26680 admin optional rkhunter_1.4.2-1.debian.tar.xz fa29940b404daec8ecce34037900723b 238290 admin optional rkhunter_1.4.2-1_all.deb -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJVPCpdXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4QzQ3MEIyQTBCMzE1NjhFMTEwRDQzMjUx NjI4MUYyRTAwN0M5OEQxAAoJEBYoHy4AfJjRwbcP/1qS27zlaTfGKjequyOq1xKC KXZtCN4RJFAGQwRtNjlZa89c8vIL1plLOy5FZKTiPmNZOjE8XxSmrMHlaLpXwbho G8I/L5t6vUUSQWEeGgKQYi1OOwKaaBunGWHkD49gEhbWzwBTWC4WlyAoDFfO4agG LxnF6Wb085uLm43brb5z+RkM4MDIaKi1Y2fWmsMatoRo29SOXYlk28j3m+y9NM1m Cj3elyMe7EsAn7xRuNgFjKoH7GvyPo8D71W94DWiFKxmw+81XZ+aaHGbwIt+iSdm 2rd9xwTW5lTVL+xMSRciyCeaM48CTKk89ZQC3aLn+KEL9IL5lFy+kUf+5pnBciUr wm8t2XRK7ta+/rVB1XBlorbHsMM2DfPHxKQOkgaK4n9DXvWPwIV/Cc7zn+P+nOlS oeiFtt/9gwRZPMyh6vT8kcnRPYkw/rSFxhaWLQNXfmrPx04FeFXYHnC8lvK9jjMj AB4Fyli/TMwk4V0oWDt79+Ixb1os4dNqZKMJwyjMAMM7L8pIBOuajgiXEQjFsL1d 98BnxxszHHLYDD0hugpGlQYNpFzCQHaZ/6AAu7tCi4mt8c5JRus+DC/sokEp0Pvg syLr9dukn8IhFrLSPwTO0aafqVdCPruNAjnmsZIgNzueKea1SldoQQAYRuaLY1/L v6dRWxJ6TC1huc1HrE1d =NN4U -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ forensics-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/forensics-devel
