On Fri, 2013-08-23 at 22:50 +0200, Andy Kannberg wrote:

> The passwordless account is correct; I use a passwordless login with
> ssh keys and disabled the password for the one account that is allowed
> to login. I suppose I can whitelist that somewhere ?
>
Take a look at PWDLESS_ACCOUNTS in the config file.
> 
> 

> - Suspicious files in /dev
> 
> ALLOWHIDDENDIR="/dev/.udev /dev/.udevdb /dev/.udev.tdb"
> ALLOWHIDDENDIR="/dev/.mdadm /dev/.udev/db /dev/.udev/rules.d"
> #ALLOWHIDDENDIR="/dev/.static"
> #ALLOWHIDDENDIR="/dev/.initramfs"
> #ALLOWHIDDENDIR="/dev/.SRC-unix"
> ALLOWHIDDENDIR="/dev/.mdadm"
>
These relate to 'hidden directories', but your error is for suspicious
files. Take a look at ALLOWDEVFILE in the config file. Probably
something like: ALLOWDEVFILE=/dev/.udev/db/*
> 
> 
> 
> 
John.

-- 
John Horne, Plymouth University, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and 
AppDynamics. Performance Central is your source for news, insights, 
analysis and resources for efficient Application Performance Management. 
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to