Re: [OT] rkhunter und chrootkit Meldungen

[Niels Jende <njende@njende.de>]

Hallo Jens, *,

Jens Schüßler schrieb:

[snip]
> Das sind False-Positives, siehe 
>
> ,----[ /usr/share/doc/chkrootkit/README.FALSE-POSITIVES ]-
> | the hidden files issue continues to crop up now and again.  basically,
> | if chkrootkit sees a hidden file (a file that begins with .) under
> | /usr/lib, it flags it as suspicious.  there are various packages that
> | contain these hidden files and they are innocuous.  however, it appears
> | that arbitrary hidden files under /usr/lib is a sign of a rootkit, so,
> | again, it's the safe vs sorry argument
> `----
>
>   

dann sind das also auch False Positives?

_________________________________________________________________________________
The following suspicious files and directories were found:
/usr/lib/firefox/.autoreg
/usr/lib/jvm/.java-gcj.jinfo
/lib/modules/2.6.17-10-386/volatile/.mounted

/usr/lib/security
/usr/lib/security/classpath.security
___________________________________________________________________________________

>
> Gruß
> Jens
>
>   
Gruß
Niels