Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 6th April 2006, 21:31
Jcorrea920 Jcorrea920 is offline
Member
 
Join Date: Feb 2006
Posts: 82
Thanks: 4
Thanked 1 Time in 1 Post
Question After running Rootkit Hunter Scan....

I have the Perfect set up with Fedora Core 4.
Apache 2.0.54
PHP 5.0
MySQL 4.1.16
ISPConfig 2.2.0

So my question is that after I run the rkhunter I am advised to inspect two hidden folders with hidden files inside of them.
Quote:
* Filesystem checks
Checking /dev for suspicious files... [ OK ]
Scanning for hidden files...[ Warning! ]
---------------
/dev/.udevdb /etc/.pwd.lock
---------------
Please inspect: /dev/.udevdb (directory)
What exactly am I looking for? How do I know if these are evil files or necessary for my system?
Code:
[postmaster@ccs02 ~]$ ls -la /dev/.udevdb
total 92
drwxr-xr-x   2 root root  500 Feb 16 11:14 .
drwxr-xr-x  10 root root 5000 Feb 16 11:15 ..
-rw-r--r--   1 root root   21 Feb 16 03:14 block@fd0
-rw-r--r--   1 root root  226 Feb 16 03:14 block@hda
-rw-r--r--   1 root root  469 Feb 16 03:14 block@hda@hda1
-rw-r--r--   1 root root  437 Feb 16 03:14 block@hda@hda2
-rw-r--r--   1 root root  476 Feb 16 03:14 block@hda@hda3
-rw-r--r--   1 root root   31 Feb 16 03:14 block@hdc
-rw-r--r--   1 root root   38 Feb 16 03:14 block@hdd
-rw-r--r--   1 root root   23 Feb 16 03:14 block@ram0
-rw-r--r--   1 root root   19 Feb 16 03:14 block@ram1
-rw-r--r--   1 root root   23 Feb 16 03:14 class@input@event0
-rw-r--r--   1 root root   21 Feb 16 03:14 class@input@mice
-rw-r--r--   1 root root   23 Feb 16 03:14 class@input@mouse0
-rw-r--r--   1 root root   19 Feb 16 03:14 class@mem@null
-rw-r--r--   1 root root   25 Feb 16 11:14 class@misc@device-mapper
-rw-r--r--   1 root root   19 Feb 16 11:14 class@printer@lp0
-rw-r--r--   1 root root   24 Feb 16 11:14 class@sound@controlC0
-rw-r--r--   1 root root   23 Feb 16 03:14 class@sound@midiC0D0
-rw-r--r--   1 root root   24 Feb 16 03:14 class@sound@pcmC0D0c
-rw-r--r--   1 root root   24 Feb 16 03:14 class@sound@pcmC0D0p
-rw-r--r--   1 root root   24 Feb 16 03:14 class@sound@pcmC0D1p
-rw-r--r--   1 root root   24 Feb 16 03:14 class@sound@pcmC0D2p
-rw-r--r--   1 root root   18 Feb 16 03:14 class@sound@seq
-rw-r--r--   1 root root   21 Feb 16 03:14 class@sound@timer
Code:
[postmaster@ccs02 ~]$ ls -la /etc/.pwd.lock
-rw-------  1 root root 0 Sep 15  2005 /etc/.pwd.lock
Am I in big trouble or what?
Reply With Quote
Sponsored Links
  #2  
Old 6th April 2006, 22:33
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

rkhunter is always complaining about those files/directories. Nothing to worry about.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 6th April 2006, 23:56
Jcorrea920 Jcorrea920 is offline
Member
 
Join Date: Feb 2006
Posts: 82
Thanks: 4
Thanked 1 Time in 1 Post
 
Thumbs up Thanks for your quick response

Thanks for your help...
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Fedora 4 TPS mail problem Hagforce HOWTO-Related Questions 13 10th February 2010 18:23
MySQL is not running!! iceberg Installation/Configuration 11 3rd January 2008 15:10
BIND views : running ISPc in a port forwarded environment benbalbo Feature Requests 4 13th February 2006 11:06
pop3 SSL/TLS not running, smtp+imap TLS/SSL ok st2xo Installation/Configuration 2 2nd February 2006 20:29
postfix courier not running in ssl mode? shadowsa Server Operation 4 19th December 2005 13:20


All times are GMT +2. The time now is 12:31.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.