I've got a false positive here:
 
* Filesystem checks
   Checking /dev for suspicious files...                      [ OK ]
   Scanning for hidden files...                               [ Warning!
]
---------------
/etc/.pwd.lock /dev/.udev
---------------
Please inspect:  /dev/.udev (directory)

------------------------------------------------
directory listing of suspicious directories
 
xxxxx:/home/xxxxx# ls -lisah /dev/.udev/
insgesamt 72K
284886736 4,0K drwxr-xr-x  2 root root 4,0K 2009-04-25 21:27 .
283848412  64K drwxr-xr-x 12 root root  60K 2009-04-25 21:27 ..
284886992 4,0K -rw-r--r--  1 root root    3 2009-04-25 21:27
uevent_seqnum
 
xxxxx:/home/xxxxx# cat /dev/.udev/uevent_seqnum
0

--------------------------------------------------
 
xxxxx:/home/xxxxx# cat /etc/.pwd.lock
xxxxx:/home/xxxxx#
--------------------------------------------------
system informations:
 
xxxxx:/home/xxxxx# uname -a
Linux xxxxx.vanager.de 2.6.18-028stab060.8-ent #1 SMP Mon Feb 9 20:49:42
MSK 2009 i686 GNU/Linux
xxxxx:/home/xxxxx#
 
xxxxx:/home/xxxxx# cat /proc/version
Linux version 2.6.18-028stab060.8-ent (r...@rhel5-32-build-xemul) (gcc
version 4.1.2 20071124 (Red Hat 4.1.2-42)) #1 SMP Mon Feb 9 20:49:42 MSK
2009


------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to