On Thu, 2007-10-25 at 16:33 +0100, Arthur Dent wrote: > On Wed, Oct 24, 2007 at 11:31:50PM +0100, John Horne wrote: > > On Wed, 2007-10-24 at 10:35 +0100, Arthur Dent wrote: > > > > > 'ls -l /dev/pts/0' does indeed report no such file even after a > > > reboot. Should I be concerned about this? > > > > > It is difficult to say. You haven't said what O/S you are running, but > > you may want to ask the question on a user mailing list for your O/S. > Sorry - should have said earlier. Fedora Core 6 > I have an old FC3 server which shows /dev/pts/0 as a deleted file (never noticed it before). I am sure the server is secure in that respect. /dev/pts/1 exists, so it seems odd that '0' does not. I may investigate further.
> > I have not yet tried the cvs 1.3.1 version. Whilst it clears up the suspscan.* > files after itself do they still need to be allowed with the ALLOWDEVFILE > option to prevent them being reported as suspicious file types during the > scan? > No, by the time file types are checked the temporary file in /dev/shm has gone. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users