On Mar 22, 1:43 pm, "Mark Haney" <[EMAIL PROTECTED]> wrote:
> LNick wrote:
>
> > Oh I forgot to mention that I also installed chkrootkit and rkhunter
> > on this system. Chkrootkit did not find anything. rkhunter found
> > some hidden directories which investigation on various forums seems to
> > indicate is normal for Ubuntu. the directories are:
>
> > /etc/.pwd.lock
> > /dev/.static
> > /dev/.udev
> > /dev/.initramfs
> > /dev/.initramfs-tools
>
> > Thank you!
>
> As to that I can say that those alerts aren't a sign you've been hacked.
> I get those same type messages from rkhunter on my debian boxes.
> Ubuntu being an offshoot of debian, I would think that's probably par
> for the course and nothing to worry about.
>
> --
> Ita erat quando hic adveni.
>
> Mark Haney
> Sr. Systems Administrator
> ERC Broadband
> (828) 350-2415
Great! I'm glad to have someone knowledgeable confirm that.
Can anyone comment about the OSSEC messages? I didn't get anything
like that on my OSSEC server (same OS, no FTP) so I'm thinking I
should rebuild it.
