Hi,I am using Rkhunter 1.4.2 port on FreeBSD 10.2
I get this warning:
[16:15:22] Info: Found file '/dev/fd/3': it is whitelisted.[16:15:22]
Checking /dev for suspicious file types [ Warning ][16:15:22] Warning:
Suspicious file types found in /dev:[16:15:22] /dev/fd/4: cannot open
`/dev/fd/4' (Bad file descriptor)[16:15:22] /dev/fd/5: cannot open
`/dev/fd/5' (Bad file descriptor)
# ls -l /dev/fdtotal 0cr-xr-xr-x 1 root wheel 0x3 Nov 23 15:32 0cr-xr-xr-x
1 root wheel 0x4 Nov 23 15:32 1cr-xr-xr-x 1 root wheel 0x5 Nov 23 15:32
2cr-xr-xr-x 1 root wheel 0x6 Nov 23 15:32 3cr-xr-xr-x 1 root wheel 0x7
Nov 23 15:32 4
I touch anything in config:
# grep -v ^# /usr/local/etc/rkhunter.conf |grep -v
^$TMPDIR=/usr/local/var/lib/rkhunter/tmpDBDIR=/usr/local/var/lib/rkhunter/dbSCRIPTDIR=/usr/local/lib/rkhunter/scriptsLOGFILE=/var/log/rkhunter.logAUTO_X_DETECT=1ALLOW_SSH_ROOT_USER=unsetALLOW_SSH_PROT_V1=2ENABLE_TESTS=ALLDISABLE_TESTS=suspscan
hidden_ports hidden_procs deleted_files
packet_cap_appsSCRIPTWHITELIST=/usr/bin/whatisSCRIPTWHITELIST=/usr/sbin/adduserIMMUTWHITELIST=/usr/bin/loginIMMUTWHITELIST=/usr/bin/passwdIMMUTWHITELIST=/usr/bin/suIMMUTWHITELIST=/sbin/initALLOWDEVFILE=/dev/fd/*UID0_ACCOUNTS=toorINSTALLDIR=/usr/localUSER_FILEPROP_FILES_DIRS=/usr/local/etc/rkhunter.conf
how can I rid off this message?
Thank you very much
------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741551&iu=/4140
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
