Originally Posted by CSsab
Later when I started running Debian Sid (testing) containers the rkhunter warning went further to complain that /lib/modules was "either missing or empty" so I put a dummy-file in there and all is good for now.
## This is a dummy file located /lib/modules in a LXC
A better solution is to disable the "os_specific" test in /etc/rkhunter.conf
See : http://www.mail-archive.com/rkhunter.../msg01719.html
On Linux os_specific runs 2 tests :
- check which modules are loaded
- check modules on the disk
As you have neither in a container you can safely disable this test.
Hope this help