Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: AlexG on May 26, 2008, 11:30:14 AM

Title: Some warnings in rkhunter
Post by: AlexG on May 26, 2008, 11:30:14 AM

Hi Forum

In the log file from rkhunter appears:

Quote

[04:02:43]   Checking /dev for suspicious file types         [ Warning ]
[04:02:43] Warning: Suspicious file types found in /dev:
[04:02:43]          /dev/nul: ASCII text
[04:02:43] Info: Found hidden file '/usr/share/man/man1/..1.gz': it is whitelisted.

Do you recommend to delete these files?

Best regards
AlexG

Title: Re: Some warnings in rkhunter
Post by: egerards on May 27, 2008, 08:45:23 AM

The warning about /dev/nul is easy to explain: the real device file is called /dev/null which is used to suppress output from commands / scripts (e.g. : testscript.sh > /dev/null ). If you or the writer of some kind of script that was ever executed on your system, made a typo using /dev/null (single 'l' in stead of double 'l'), the output got redirected to the file /dev/nul in stead of the device /dev/null. Simply remove /dev/nul and you're rid of the rkhunter message.

I think you can safely ignore the second warning/info. On my system there is also the file /usr/share/man/man1/..1.gz present. This file is used when you type a 'man .' .