Version Rootkit Hunter 1.4.6 on Ubuntu 16.04 I apologize in advance for the number of questions.
1) What does the number after /usr/local/bin/rkhunter: signify? process number? some other code number? 2) After running sudo rkhunter -c and seeing the following, what are the best practices for solving this? /usr/local/bin/rkhunter: 14795: [: /usr/lib/x86_64-linux-gnu/notify-osd: unexpected operator /usr/local/bin/rkhunter: 14795: [: /usr/bin/compiz: unexpected operator /usr/local/bin/rkhunter: 14795: [: /usr/bin/nautilus: unexpected operator /usr/local/bin/rkhunter: 14795: [: /usr/lib/gnome-terminal/gnome-terminal-server: unexpected operator Rootkit checks... Rootkits checked : 480 Possible rootkits: 4 3) Also, running rkhunter as: sudo rkhunter --rwo produces: "You must enter an option for the program to perform." Is this switch ONLY for cronjobs and if so, why doesn't the help file specify that? 4) what does "checking for suspicious (large) shared memory segments [ Warning ]" mean? 5) Assuming an update is performed against not-so-sure stable files, is there another method to run rkhunter in which it will check known valid file signatures external to the machine? Thank you. ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users