Hello All,
I have a couple of Java applications running on this machine. A bit of
googling has shown me that when they run they create a file called
hsperfdata_{USER}/{NUMBER} which apparently helps with performance
somehow. The location of this file is (again, apparently) hard-coded
as /tmp/.RKHunter doesn't like these files. Warning: File '/tmp/hsperfdata_root/954' (score: 230) contains some suspicious content and should be checked. Warning: File '/tmp/hsperfdata_root/954' (score: 230) contains some suspicious content and should be checked. Note that the same file is reported twice for some reason... So how best to deal with these? 1) Ignore them? - Well yes, I do that, but it would be nice to have a "clean" run each day. 2) Delete the /tmp/hsperfdata_* directories / files ? Well yes, I've done that too. It certainly stops the rkh reports, and as I only reboot the server once per month (usually) that solves the problem - but I don't know what impact this has on the performance of the Java apps. 3) Whitelist the files? If so how? Should I try RTKT_DIR_WHITELIST="hsperfdata_*" Would that work? 4) Or is there a better solution? Thanks in advance... Mark
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ 10 Tips for Better Web Security Learn 10 ways to better secure your business today. Topics covered include: Web security, SSL, hacker attacks & Denial of Service (DoS), private keys, security Microsoft Exchange, secure Instant Messaging, and much more. http://www.accelacomm.com/jaw/sfnl/114/51426210/
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
