Frank asks:

 > What is your yum update schedule?

I run "yum update" manually every Wednesday evening.

Ed says:

 > See...
 > 
http://www.freedesktop.org/software/systemd/man/systemd-readahead-replay.service.html

ok.  Thank-you, Ed.  But "/" seems like a strange place to put that 
file.  It can spook some non-sysadmins (like me!).

John asks:
 > So what happened when you ran 'rpm -V ...'? It will probably show that
 > the package has changed in some way.

I checked several.  In every case, it says "package [whatever] is not 
installed"!  (But I checked, and the packages are where rkhunter is 
looking.)

Michael says:
 > It's a false positive.
 > See https://bugzilla.redhat.com/1045116 for the /dev/dev case.
 > And /.readahead ist from the readahead service. Systemd nowadays.

Thank-you Michael.

I consider parts 2 and 3 of my original post closed.  But I remain 
puzzled that rpm doesn't find packages that "whereis" finds in the 
places that rkhunter has rpm looking.

Bill.

------------------------------------------------------------------------------
WatchGuard Dimension instantly turns raw network data into actionable 
security intelligence. It gives you real-time visual feedback on key
security issues and trends.  Skip the complicated setup - simply import
a virtual appliance and go from zero to informed in seconds.
http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to