On Thu, 2012-01-05 at 10:29 +0200, Marius Stan wrote: > For some reason, Helmut's message didn't arrive in my inbox, so I'm > forced to reply myself: > > I have the following in rkhunter.conf: > ALLOWDEVFILE="/dev/shm/php_session*" > ALLOWDEVFILE="/dev/shm/php_session/*" > ALLOWDEVFILE="/dev/shm/php_session/*/*" > ALLOWDEVFILE="/dev/shm/php_session/*/*/*" > > And yet, I still get these daily warnings: > > Warning: Suspicious file types found in /dev: > /dev/shm/php_session/f/f/sess_ff74cfba3aac7e2cc9bac2c5fb0bd5f0: > ASCII text, with no line terminators > /dev/shm/php_session/f/f/sess_ffcbd2f4ba4c1df2987e0b5a6708160c: > ASCII text, with no line terminators > /dev/shm/php_session/f/1/sess_f198c5d1a97be02559cbdebc96695ac0: > ASCII text, with no line terminators > /dev/shm/php_session/f/1/sess_f13ce52a2c77e5d2603a4ec701034b96: > ASCII text, with no line terminators > > Are you running the 'suspscan' test? If so, you cannot whitelist the entries it finds.
John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex infrastructure or vast IT resources to deliver seamless, secure access to virtual desktops. With this all-in-one solution, easily deploy virtual desktops for less than the cost of PCs and save 60% on VDI infrastructure costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
