Hi I am new to the list I would guess that somewhere along the line a system or new user may have been added, deleted or modified I assume if your the gate keeper you will have log for your particular Network and be able to work back wards and see what has changed.
I hope this helps as I am also new to running rkhunter I also run chkrootkit which is very similar and also east to setup So I would also advise you to goto to chkrootkit.org - http://chrootkit.org version 46a is now available and run in it's great app and best run together for tighter security. Cheers On Thu, 2006-08-17 at 11:50 +1200, Hack was here wrote: > I ran my rkhunter today and found this > > System checks > * Allround tests > Checking hostname... Found. Hostname is localhost.localdomain > Checking for passwordless user accounts... OK > Checking for differences in user accounts... Found differences > Info: > > What does found differences mean and what do i have to do to remove > that red line. > > thanks > HH > > > This email and any attachments may contain privileged and confidential > information and are intended for the addressee only. If you have > received this email in error, please notify the sender and delete this > e-mail immediately. Any confidentiality, privilege or copyright is not > waived or lost because this email has been sent to you in error. It is > your responsibility to check this email and any attachments for > viruses. No warranty is made that this material is free from any > computer virus or any error. Any loss/damage incurred by using this > material is not the sender's responsibility. > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ Rkhunter-users mailing list > Rkhunter-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/rkhunter-users -- Unix/ Linux Systems Administrator Chuck Amadi The Surgical Material Testing Laboratory (SMTL), Princess of Wales Hospital Coity Road Bridgend, United Kingdom, CF31 1RQ. Email chuck.smtl.co.uk Tel: +44 1656 752820 Fax: +44 1656 752830 ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
