Displaying 20 results from an estimated 8000 matches similar to: "Fwd: For the CentOS list: rkhunter and NFS"
2015 Aug 07
2
semi-OT: rkhunter, fix "broken links"
Hi, folks,
rkhunter is reporting a broken link on one of our servers. This is
quite reasonable, since it's on a drive whose controller card I have
declared dead the other day. I've been googling, searching in the
manpage, and I've done an rkhunter --propupd, but it still finds the
broken link. Anyone know how to remove the link from the rkhunter d/b?
mark
2015 Aug 07
0
semi-OT: rkhunter, fix "broken links"
On Fri, 2015-08-07 at 09:45 -0400, m.roth at 5-cent.us wrote:
> Hi, folks,
>
> rkhunter is reporting a broken link on one of our servers. This is
> quite reasonable, since it's on a drive whose controller card I have
> declared dead the other day. I've been googling, searching in the
> manpage, and I've done an rkhunter --propupd, but it still finds the
>
2017 Aug 30
1
rkhunter and prelink
in my prior message, that should be in rkhunter.conf
On Wed, Aug 30, 2017 at 11:43 AM, Tony Schreiner <anthony.schreiner at bc.edu>
wrote:
> This has come up for me on the most recent upgrade, add the line
>
> HASH_CMD=sha1sum
>
> On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote:
>
>> Can't remember if I posted this before... We're getting
2014 Jan 17
1
rkhunter
I updated java-1.7.0-openjdk a few hours ago - it *was* listed as a
critical security update, and I don't want yelling from rkhunter. The man
page tells me I can tell it rkhunter --propupd <package name>... but it
doesn't know the name above as a package. Been googling a bit, and cannot
find a good example of a package (other than the manpage's coreutil).
Anyone got an example,
2017 Aug 30
4
rkhunter and prelink
Can't remember if I posted this before... We're getting warnings from
rkhunterWarning: Checking for prerequisites [ Warning ]
All file hash checks will be skipped because:
This system uses prelinking, but the hash function command does not
look like SHA1 or MD5.
Now, googling, I find people saying to rm /etc/prelink.cache, then run
rkhunter --propupd.
Works. And then,
2017 Aug 30
0
rkhunter and prelink
This has come up for me on the most recent upgrade, add the line
HASH_CMD=sha1sum
On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote:
> Can't remember if I posted this before... We're getting warnings from
> rkhunterWarning: Checking for prerequisites [ Warning ]
> All file hash checks will be skipped because:
> This system uses
2017 Aug 30
0
rkhunter and prelink
On Wed, 2017-08-30 at 11:03 -0500, Valeri Galtsev wrote:
> On Wed, August 30, 2017 10:43 am, Tony Schreiner wrote:
> > This has come up for me on the most recent upgrade, add the line
> >
> > HASH_CMD=sha1sum
> >
> > On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote:
> >
> > > Can't remember if I posted this before...
2017 Aug 30
2
rkhunter and prelink
On Wed, August 30, 2017 10:43 am, Tony Schreiner wrote:
> This has come up for me on the most recent upgrade, add the line
>
> HASH_CMD=sha1sum
>
> On Wed, Aug 30, 2017 at 11:15 AM, <m.roth at 5-cent.us> wrote:
>
>> Can't remember if I posted this before... We're getting warnings from
>> rkhunterWarning: Checking for prerequisites [ Warning
2015 Sep 01
0
List
Nomii Pro wrote:
> Nomiipro at gmail.com
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>
Having looked at the headers, I see that this is the new thing onlist -
we're being spammed from gmail. Does this mean nixspam will be blocking
gmail anytime soon?
mark, tired of
2014 Oct 08
1
Actual complaining: nixspam
John accused me of complaining about systemd... this here's *real*
complaining.
Several times every month, my email starts getting bounced by freakin'
nixspam, because my giant hosting provider, that hosts millions of
domains. Akemi has argued that nixspam works just fine (if so, then why
did we get that spam a few weeks ago?).
I've politely requested being put on a whitelist, and
2006 Dec 02
1
How to install rkhunter properly
Hi list,
after a bit of struggling I found out how to cleanly install rkhunter
... maybe this is useful for you:
* Download rkhunter (I downloaded v 1.2.8)
* mv /etc/rpm/platform /root/etc_rpm_platform
* setarch i386 rpmbuild -ta --target=i386 rkhunter-1.2.8.tar.gz
* mv /root/etc_rpm_platform /etc/rpm/platform
* rpm -ivh /usr/src/redhat/RPMS/noarch/rkhunter-1.2.8-1.noarch.rpm
* wget
2014 Apr 17
0
semi-OT:R and rkhunter
The latest version of rkhunter is complaining about "suspicious file
types" in /dev/shm. Thing is, they're being created on the fly by R, and
then seem to be a random name (5d1f...), and I have zero expectation that
R will only create shm files beginning with those characters.
For those running rkhunter, if you've run into something like this, how
have you handled it - told
2015 Aug 27
0
please block user
On Thu, August 27, 2015 9:29 am, m.roth at 5-cent.us wrote:
> Gary Stainburn wrote:
>> Bad news Guys, they've just moved the emails to somewhere else and have
started again:
> <snip>
>
> A suggestion: there should be a way to filter using *domain* AND
mailhost;
> that is, if emails come from a domain, and through one mailhost, then
block the domain. If many domains,
2006 Oct 30
2
Problem rkhunter v. 1.2.8 - CENTOS 4
Dear Friends,
I am using CENTOS 4.3 - kernel 2.6.9-42.0.2.EL with rkhunter version
1.2.8, but the rkhunter program show me problem on file /bin/kill.
I compare files /bin/kill with other CENTOS 4 and it has same size.
====================== SHOE LOG ===========================
Rootkit Hunter 1.2.8 is running
Mon, 30 Oct 2006 12:56:44 -0200
Determining OS... Ready
Checking binaries
*
2015 Aug 27
4
please block user
Gary Stainburn wrote:
> Bad news Guys, they've just moved the emails to somewhere else and have
> started again:
<snip>
A suggestion: there should be a way to filter using *domain* AND mailhost;
that is, if emails come from a domain, and through one mailhost, then
block the domain. If many domains, and the same mailhost, only then block
the mailhost.
I've been thinking about
2014 Apr 30
0
rkhunter 1.4.2 (epel) unary operator expected -ne found
Anyone seeing this?
/etc/cron.daily/rkhunter:
/usr/bin/rkhunter: regel 13967: [: eenzijdige operator werd verwacht, -ne gevonden
Translating: line 13967 unary operator expected -ne found
Line 13967 is: if [ `${IPCS_CMD} -u 2>/dev/null | awk -F' ' '/segments allocated/ {print $3}'` -ne 0 ]; then
rkhunter 1.4.2 release 1.el6 from epel on a CentOS 6.5
Thanks
Patrick
2006 Feb 18
0
Does your rkhunter do an md5 check?
I rebuilt rkhunter-1.2.8-1.noarch.rpm by using the spec and tgz from
the rkhunter site (www.rootkit.nl). (I rebuilt it using his
instructions.) However rkhunter does not do an md5 check. The box
used to have fedora and each time there were updates it would
complain that the some of the md5's don't match. I contacted the
author using his contact feature on Wednesday but he hasn't
2010 Feb 26
0
rkhunter doesn't remove temp suspscan files in /dev/shm
Alle,
I know this is off-topic, so I apologize in advance, but we have
installed rkhunter from EPEL (because it has the current version, 1.3.6
vice the 1.3.4 rpmforge version) on our CentOS machine and find that it
does not remove the files in /dev/shm it uses for the SUSPSCAN test,
this triggering a warning for said test. This was a known bug that was
supposed to be have been fixed in V1.3.1.
2011 Mar 08
1
rkhunter alert dovecot using port 1984
Hi all,
Debian Lenny, dovecot 1.0.15
My rkhunter script has picked up dovecot using port 1984 temporarily.
When I run it now however, it is gone.
Warning: Network TCP port 1984 is being used by /usr/lib/dovecot/imap.
Possible rootkit: Fuckit Rootkit
Use the 'lsof -i' or 'netstat -an' command to check this.
Does dovecot use this port for any reason? anyone seen this before?
2014 Nov 20
1
CentOS Digest, Vol 118, Issue 20 - Email found in subject
Received
-----Original Message-----
From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of centos-request at centos.org
Sent: Thursday, November 20, 2014 6:00 AM
To: centos at centos.org
Subject: CentOS Digest, Vol 118, Issue 20 - Email found in subject
Send CentOS mailing list submissions to
centos at centos.org
To subscribe or unsubscribe via the World Wide