Hello,
we just moved to a new server, O/S Centos 5, installed Rkhunter then got this
report:
==================================================================
[ Rootkit Hunter version 1.3.4 ]
File updated: searched for 150 files, found 133, missing hashes 33
Warning: File '/bin/awk' has the immutable-bit set.
Warning: File '/bin/chmod' has the immutable-bit set.
Warning: File '/bin/chown' has the immutable-bit set.
Warning: No hash value found for file '/bin/cp' in the rkhunter.dat file.
Warning: File '/bin/cp' has the immutable-bit set.
Warning: File '/bin/df' has the immutable-bit set.
Warning: File '/bin/ed' has the immutable-bit set.
Warning: File '/bin/login' has the immutable-bit set.
Warning: No hash value found for file '/bin/ls' in the rkhunter.dat file.
Warning: File '/bin/ls' has the immutable-bit set.
Warning: File '/bin/mail' has the immutable-bit set.
Warning: File '/bin/mktemp' has the immutable-bit set.
Warning: No hash value found for file '/bin/mount' in the rkhunter.dat file.
Warning: No hash value found for file '/bin/mv' in the rkhunter.dat file.
Warning: No hash value found for file '/bin/netstat' in the rkhunter.dat file.
Warning: File '/bin/netstat' has the immutable-bit set.
Warning: No hash value found for file '/bin/passwd' in the rkhunter.dat file.
Warning: File '/bin/ps' has the immutable-bit set.
Warning: No hash value found for file '/bin/rpm' in the rkhunter.dat file.
Warning: File '/bin/gawk' has the immutable-bit set.
Warning: File '/usr/bin/awk' has the immutable-bit set.
Warning: No hash value found for file '/usr/bin/curl' in the rkhunter.dat file.
Warning: No hash value found for file '/usr/bin/elinks' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/bin/find' in the rkhunter.dat file.
Warning: File '/usr/bin/find' has the immutable-bit set.
Warning: No hash value found for file '/usr/bin/id' in the rkhunter.dat file.
Warning: No hash value found for file '/usr/bin/killall' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/bin/links' in the rkhunter.dat file.
Warning: No hash value found for file '/usr/bin/lynx' in the rkhunter.dat file.
Warning: No hash value found for file '/usr/bin/passwd' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/bin/pstree' in the rkhunter.dat
file.
Warning: File '/usr/bin/pstree' has the immutable-bit set.
Warning: No hash value found for file '/usr/bin/runcon' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/bin/stat' in the rkhunter.dat file.
Warning: File '/usr/bin/top' has the immutable-bit set.
Warning: No hash value found for file '/usr/bin/wget' in the rkhunter.dat file.
Warning: File '/usr/bin/gawk' has the immutable-bit set.
Warning: No hash value found for file '/sbin/ifconfig' in the rkhunter.dat file.
Warning: No hash value found for file '/sbin/sulogin' in the rkhunter.dat file.
Warning: File '/sbin/syslogd' has the immutable-bit set.
Warning: No hash value found for file '/usr/sbin/adduser' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/groupadd' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/groupdel' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/groupmod' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/grpck' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/lsof' in the rkhunter.dat file.
Warning: File '/usr/sbin/lsof' has the immutable-bit set.
Warning: No hash value found for file '/usr/sbin/pwck' in the rkhunter.dat file.
Warning: No hash value found for file '/usr/sbin/useradd' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/userdel' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/usermod' in the rkhunter.dat
file.
Warning: No hash value found for file '/usr/sbin/vipw' in the rkhunter.dat file.
Warning: Suspicious file types found in /dev:
/dev/null.21806: ELF 32-bit LSB core file Intel 80386, version 1
(SYSV), SVR4-style, from 'imake'
/dev/null.11313: ELF 32-bit LSB core file Intel 80386, version 1
(SYSV), SVR4-style, from 'imake'
/dev/null.3662: ELF 32-bit LSB core file Intel 80386, version 1
(SYSV),
SVR4-style, from 'imake'
/dev/null.12107: ELF 32-bit LSB core file Intel 80386, version 1
(SYSV), SVR4-style, from 'imake'
Warning: Hidden directory found: /dev/.udev
Warning: Hidden file found: /usr/share/man/man1/..1.gz: gzip compressed data,
from Unix, max compression
======================================================================
Is this anything to be concerned with, can these warning be fixed? Our other
server was RHE 4 and we never go these warning.
Thx's
Mike(mickalo)Blezien
===============================
Thunder Rain Internet Publishing
Providing Internet Solution that Work
http://www.thunder-rain.com
===============================
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables
unlimited royalty-free distribution of the report engine
for externally facing server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
