On Sat, 2007-12-15 at 15:13 +0100, AnMaster wrote:
>
> On my FreeBSD I get this in the log file of rkhunter. I don't
> understand what the warning is for, the log file doesn't explain it.
>
> [13:58:05]   Performing check for possible rootkit strings
> [13:58:05] Info: Starting test name 'possible_rkt_strings'
> [13:58:05] Warning: Checking for possible rootkit strings  [ Warning ]
> [13:58:05]          No system startup files found.
> [13:58:05]
>
The warning is because most systems have some form of system startup
files (typically in /etc/init.d or /etc/rc.d). You can set this in the
rkhunter.conf file (SYSTEM_RC_DIR).

> Another one is this. As far as I know it is normal for the psedo interface 
> pflog
> to be promisc? It is used for the pf firewall on FreeBSD. (FreeBSD supports
> three different firewalls)
> [13:59:07]   Checking for promiscuous interfaces             [ Warning ]
> [13:59:07] Warning: Possible promiscuous interfaces:
> [13:59:07]          'ifconfig' command output: pflog0:
>
Fixed in CVS. Previously only OpenBSD was checked.



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED]       Fax: +44 (0)1752 233839

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to