On 03/11/2010 10:46 PM, unsp...@hushmail.com wrote: > On Wed, 10 Mar 2010 12:34:24 +0100 William Maddler > <n...@maddler.net> wrote: >> since about a week I'm getting alerts about hidden processes found > on my system (Debian 5.0 stable 32bit). >> >> I've just found that reported PIDs are Postfix (2.5.5-1.1) ltmp > and smtp mail delivery processes. > >> Any clue? > > If those processes are allowed to use hidden files you can > whitelist them. See rkhunter.conf and the end of the FAQ for > details.
The point is that smtp and lmtp aren't supposed to be hidden processes :) Yes I could whitelist them, but I'd argue they shouldn't be even detected as hidden. Otherwise there is something "wrong" wether in Rkhunter or in Postfix. See what I mean? Thx William > > > Best regards, > unSpawn > --- > ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
