Warning reported by rkhunter

Discussion in 'Installation/Configuration' started by concept21, Sep 29, 2019.

  1. concept21

    concept21 Member

    The rkhunter reports these everyday -
    1. Warning: The following suspicious (large) shared memory segments have been found: Process: /usr/sbin/apache2 PID: 11790 Owner: root Size: 1.2MB (configured size allowed: 1.0MB)

    2. Warning: No output found from the lsmod command or the /proc/modules file: /proc/modules output: lsmod output:

    How do I correct them? :rolleyes:
    My OS is Ubuntu 18.04.3, ISPConfig 3.1.15
     
  2. Jesse Norell

    Jesse Norell Well-Known Member

    Code:
    echo 'ALLOWIPCPROC=/usr/sbin/apache2' >> /etc/rkhunter.conf.local
    I'd guess your in a container environment where you don't have lsmod installed, nor access to /proc/modules. Add 'os_specific' to DISABLE_TESTS in /etc/rkhunter.conf.local (manually check if you have an existing line, and add there, or create a new one if not).
     
  3. concept21

    concept21 Member

    Jesse,
    Yes. The first one is correct. I will also try the 2nd one.
    Thanks. :)
     

Share This Page