For some reason, Helmut's message didn't arrive in my inbox, so I'm
forced to reply myself:
I have the following in rkhunter.conf:
ALLOWDEVFILE="/dev/shm/php_session*"
ALLOWDEVFILE="/dev/shm/php_session/*"
ALLOWDEVFILE="/dev/shm/php_session/*/*"
ALLOWDEVFILE="/dev/shm/php_session/*/*/*"
And yet, I still get these daily warnings:
Warning: Suspicious file types found in /dev:
/dev/shm/php_session/f/f/sess_ff74cfba3aac7e2cc9bac2c5fb0bd5f0: ASCII
text, with no line terminators
/dev/shm/php_session/f/f/sess_ffcbd2f4ba4c1df2987e0b5a6708160c: ASCII
text, with no line terminators
/dev/shm/php_session/f/1/sess_f198c5d1a97be02559cbdebc96695ac0: ASCII
text, with no line terminators
/dev/shm/php_session/f/1/sess_f13ce52a2c77e5d2603a4ec701034b96: ASCII
text, with no line terminators
And the list is very long...
------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual
desktops for less than the cost of PCs and save 60% on VDI infrastructure
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
