Rkhunter-Warning Meaning?

English Install/Boot/Login
#1

Hi,

I have just moved from openSUSE 12.1 32-bit to 12.2 64-bit.
All OK.

As root I update Rkhunter 1.3.8 and run it: rkhunter --checkall
It shows lots directories of :/sbin
/usr
/bin

as Warning ]

A directory access permissions is:~> ls -la /sbin/modinfo
-rwxr-xr-x 1 root root 31320 26 sep 11:17 /sbin/modinfo

The same with:Checking if SSH root access is allowed Warning ]
Checking if SSH protocol v1 is allowed Warning ]
…
Checking for hidden files and directories Warning ]

Meaning? What to do?

Thanks,
PV

Desktop: OpenSUSE 12.2 64-bit | KDE 4.8.5 | Linux 3.4.28
Intel Core 2 1.86 GHz | 4 Mb cache | 6 RAM

#2

On 2013-02-24 17:46, palp56 wrote:
>
> Hi,
>
> I have just moved from openSUSE 12.1 32-bit to 12.2 64-bit.
> All OK.
>
> As root I update Rkhunter 1.3.8 and run it: rkhunter --checkall
> It shows lots directories of :

Please repost using code tags. Lines have wrapped and I’m not sure which
corresponds where.

Please use code tags for printouts and commands. Advanced editor, ‘#’
button.
Posting in
Code Tags - A Guide

–
Cheers / Saludos,

Carlos E. R.
(from 12.1 x86_64 “Asparagus” at Telcontar)

#3

I think it means that the designers of rkhunter disagree with your choice.

What I did, was uninstall rkhunter. It wasn’t reporting anything useful. It was just producing noise.

#4

Thank you.

PV

#5

rkhunter tend to flag legit files, I also had this question and the answer is: uninstall and install chkrootkit :smiley: