On Sun, 2009-02-22 at 15:36 +0000, Robert Hare wrote: > Hi folks, > I've got warnings from rkhunter, see log below. > I know about Warning: Hidden directory found: /dev/.udev, I just haven't > whitelisted it yet. chkrootkit isn't reporting anything unusual. > How do I find out if I have a problem, and apart from rebuilding my OS > from scratch, what can I do? > If the warnings relate to file properties, then as unSpawn has said you need to check the programs against a trusted source. However, as a first check, and since you are running ubuntu, you could perhaps try something like:
rkhunter --enable properties --rwo --pkgmgr dpkg I'll leave it to you to check with the man page to work out what this is actually doing :-) John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
