On Mon, 2011-08-01 at 12:38 +0100, Arthur Dent wrote: > > > > I have initiated another run and it is running as I write this. I'll > > report back. > > Well I didn't expect this: > Warning: The following processes are using deleted files: > Process: /usr/sbin/dovecot PID: 709 File: > /run/dovecot/login-master-notifyb6a920783290559f > Process: /usr/bin/python PID: 743 File: /tmp/ffixWTeCg > Process: /usr/libexec/mysqld PID: 1278 File: /tmp/ibNuqKo8 > Process: /usr/bin/pulseaudio PID: 1738 File: > /usr/bin/pulseaudio > Process: /usr/libexec/dovecot/imap-login PID: 4470 File: > /run/dovecot/login-master-notifyf79914a30abb39fe > Process: /usr/libexec/dovecot/imap-login PID: 4474 File: > /run/dovecot/login-master-notifyf79914a30abb39fe > Process: /usr/bin/gedit PID: 6570 File: /tmp/ffiKvWZQp > Process: /bin/mailx PID: 6640 File: /tmp/Rs68fPz4 > > Notice the /bin/bash & /bin/gawk entries are now gone, but all the > others are still there. Each an every one is in the .conf.local file. > > My brain hurts... > Mine too, so I'm off to lunch :-) First thing I guess is can you email me (not the list) the rkhunter.log log file please.
John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win $100 to spend on ThinkGeek. http://p.sf.net/sfu/slashdot-survey _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
