On Tue, 28 Nov 2017 14:50:53 +0000 Warren Lee Snider <wlsni...@siu.edu> wrote:

> Hello. First time posting to list. Our office has been running rkhunter on 
> test and production servers for several years now. We run with redhat and 
> centos versions 6 and 7. Recently, we updated rkhunter from versions 1.4.2 to 
> 1.4.4. We use the epel repository to get rkhunter. The upgrade to rkhunter 
> version 1.4.4 has caused more reports similar to the following:
> 
> Warning: The following suspicious shared memory segments have been found:
>          Process:     PID: 13365    Owner: oracle

Are you sure you have the latest version from epel?
rkhunter-1.4.4-3.el7.noarch from epel has the first line of changelog:
- Disable ipc_shared_mem test for now due to false positives. Bug #1472299

Regards,
Nerijus

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to