Autor Tópico: Log do rkhunter  (Lida 1829 vezes)

Offline docetrago

  • Usuário Ubuntu
  • *
  • Mensagens: 78
    • Ver perfil
Log do rkhunter
« Online: 12 de Agosto de 2009, 17:17 »
Pessoal,

acabei de reinstalar o Ubuntu 9.04, dei o comando --update e --propupd, rodei rkhunter -c. Gostaria de saber como fazer para corrigir as situações que geraram os avisos do log abaixo ( postei somente o que deu mensagem ) :

[ Rootkit Hunter version 1.3.4 ]

  Performing file properties checks

    /bin/which                                               [ Warning ]
    /usr/bin/groups                                        [ Warning ]
    /usr/bin/ldd                                             [ Warning ]
    /usr/bin/lwp-request                               [ Warning ]
    /usr/sbin/adduser                                    [ Warning ]

  Performing filesystem checks
    Checking /dev for suspicious file types                  [ Warning ]
    Checking for hidden files and directories                [ Warning ]

System checks summary
=====================

File properties checks...
    Files checked: 123
    Suspect files: 5

Offline docetrago

  • Usuário Ubuntu
  • *
  • Mensagens: 78
    • Ver perfil
Re: Log do rkhunter
« Resposta #1 Online: 12 de Agosto de 2009, 20:47 »
Mais detalhes ( copiei do log em /var/log ) :

/bin/which                                        [ Warning ]
Warning: The command '/bin/which' has been replaced by a script: /bin/which: POSIX shell script text executable

/usr/bin/groups                                   [ Warning ]
Warning: The command '/usr/bin/groups' has been replaced by a script: /usr/bin/groups: POSIX shell script text executable

/usr/bin/ldd                                      [ Warning ]
Warning: The command '/usr/bin/ldd' has been replaced by a script: /usr/bin/ldd: Bourne-Again shell script text executable

/usr/bin/lwp-request                              [ Warning ]
Warning: The command '/usr/bin/lwp-request' has been replaced by a script: /usr/bin/lwp-request: a /usr/bin/perl -w script text executable

/usr/sbin/adduser                                 [ Warning ]
Warning: The command '/usr/sbin/adduser' has been replaced by a script: /usr/sbin/adduser: a /usr/bin/perl script text executable

Checking /dev for suspicious file types         [ Warning ]
Warning: Suspicious file types found in /dev:
/dev/shm/pulse-shm-2882028468: data

Checking for hidden files and directories       [ Warning ]
Warning: Hidden directory found: /dev/.udev
Warning: Hidden directory found: /dev/.initramfs