Public bug reported:
Binary package hint: rkhunter
When running rkhunter on my (several) Ubuntu 6.06, I have found at least
4 files/dirs/symlinks shipped by Ubuntu itself that is found to be
"suspicious" by rkhunter.
These are:
/lib/modules/2.6.15-27-amd64-generic/volatile/.mounted
/dev/.static
/dev/.udev
/dev/.initramfs
Although it is easy to add these to the the allow-list in
/etc/rkhunter.conf, it's annoying to have to do this on all your
servers, so I think it would be sensible for Ubuntu to add these to the
rkhunter.conf we ship.
** Affects: rkhunter (Ubuntu)
Importance: Undecided
Status: Unconfirmed
--
rkhunter complains about files shipped by Ubuntu
https://launchpad.net/bugs/86153
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
