HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (
-   Server Operation (
-   -   rkhunter warnings (

germinator 9th March 2011 18:10

rkhunter warnings
hello community!

today I noticed that rkhunter has sent my root user on my debina lenny machine some warnings .. that i'd like to fix but do not know how to do that.
it says that there are suspicious files in /dev and that the application "exim" is not installed .. i've already searched about it .. but no luck ..

should i be concerned or is everything ok ?


falko 10th March 2011 17:54

You can try

rkhunter --propupd
From the rkhunter man page:


One of the checks rkhunter performs is to compare various current file properties of various commands, against those it has previously
stored. This command option causes rkhunter to update its data file of stored values with the current values.

WARNING: It is the users responsibility to ensure that the files on the system are genuine and from a reliable source. rkhunter can only
report if a file has changed, but not on what has caused the change. Hence, if a file has changed, and the --propupd command option is used,
then rkhunter will assume that the file is genuine.
But I think these warnings are nothing to worry about. I get them myself.

All times are GMT +2. The time now is 22:34.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.