Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Linux, Unix › ubuntu rkhunter warnings !!
New Posts  All Forums:Forum Nav:

ubuntu rkhunter warnings !!

post #1 of 9
Thread Starter 
hey guys, i ran rkhunter and found 3 warnings on my ubuntu 10.10
Code:
/usr/bin/last                                            [ Warning ]
    /usr/bin/ldd                                             [ Warning ]
/sbin/sulogin                                            [ Warning ]

File properties checks...
Files checked: 132
Suspect files: 3

is my linux being compromised?
post #2 of 9
Did you run the update before running rkhunter? You can also try using the verification option.

sudo apt-get rkhunter --update

sudo rkhunter --check --pkgmgr dpkg
post #3 of 9
all 3 of those files are legit files.... do an "ls -l" on each to give a little more detail, cause if permissions are set wrong or something along those lines that would be more helpful than rkhunter just saying "WARNING" smile.gif
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
post #4 of 9
Thread Starter 
strange i upgraded to the newest version 1.3.8 i got 4 new warnings and 2 suspect applications
Quote:
Checking for prerequisites [ Warning ]

/usr/sbin/adduser [ Warning ]
/usr/bin/ldd [ Warning ]
/usr/bin/lwp-request [ Warning ]
/bin/which [ Warning ]
Checking /dev for suspicious file types [ Warning ]
Checking for hidden files and directories [ Warning ]
Checking version of GnuPG [ Warning ]
Checking version of OpenSSL [ Warning ]
post #5 of 9
Quote:
Originally Posted by InTeL;13231701 
strange i upgraded to the newest version 1.3.8 i got 4 new warnings and 2 suspect applications

looks like the program just likes to say warning tongue.gif
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
post #6 of 9
check the log at /var/log/rkhunter.log, use this command:

sudo gedit /var/log/rkhunter.log

or if you prefer to keep it cli:

sudo nano /var/log/rkhunter.log

i installed it, it gave me the same type of errors, looked in the log, nothing stood out, nothing to really note why they were flagged...dunno really, since it didn't find anything, and they are just warnings, assuming you can live with it?
Bazinga Punk
(12 items)
 
ooh shiny!
(12 items)
 
 
CPUMotherboardGraphicsRAM
Intel Xeon 3440 AsRock P55 extreme Evga 8800 GT 512 MB Gskill Ripjaws 
Hard DriveCoolingOSMonitor
Western Digital Blue Antec Khuler 620 Ubuntu 11.10 Asus vw264H 
KeyboardPowerCaseMouse
GIGABYTE KM7600 CORSAIR TX 650 Cooler Master 590 GIGABYTE GM-M6800 
CPUMotherboardGraphicsRAM
Intel Core I5 6500 Gigabyte z170xp-SLI Nvidia 970gtx Corsair 16gb ddr4 2666mhz  
Hard DriveHard DriveOSMonitor
250gb Samsung Evo 850 250gb Samsung Evo 850 Windows 10 Samsung 43" 4k MU6300 
KeyboardPowerCaseMouse
Logitech Orion Spark 750w corsair Corsair 230T (Orange) Logitech G700 
  hide details  
Reply
Bazinga Punk
(12 items)
 
ooh shiny!
(12 items)
 
 
CPUMotherboardGraphicsRAM
Intel Xeon 3440 AsRock P55 extreme Evga 8800 GT 512 MB Gskill Ripjaws 
Hard DriveCoolingOSMonitor
Western Digital Blue Antec Khuler 620 Ubuntu 11.10 Asus vw264H 
KeyboardPowerCaseMouse
GIGABYTE KM7600 CORSAIR TX 650 Cooler Master 590 GIGABYTE GM-M6800 
CPUMotherboardGraphicsRAM
Intel Core I5 6500 Gigabyte z170xp-SLI Nvidia 970gtx Corsair 16gb ddr4 2666mhz  
Hard DriveHard DriveOSMonitor
250gb Samsung Evo 850 250gb Samsung Evo 850 Windows 10 Samsung 43" 4k MU6300 
KeyboardPowerCaseMouse
Logitech Orion Spark 750w corsair Corsair 230T (Orange) Logitech G700 
  hide details  
Reply
post #7 of 9
rkhunter and chkrootkit are both worthless. All they do is throw false positives.
Skylake Build
(12 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5-6600k Gigabyte Z-170 Gaming 7 Gigabyte R9 390  Gskill Ripjaws V DDR4 
Hard DriveCoolingOSMonitor
Samsung 850 Evo Corsair H115i Windows 10 Pro Asus  
KeyboardPowerCaseMouse
Generic EVGA NEX750 G1 Phanteks Eclipse P400 GSkill MX780 
  hide details  
Reply
Skylake Build
(12 items)
 
  
CPUMotherboardGraphicsRAM
Intel Core i5-6600k Gigabyte Z-170 Gaming 7 Gigabyte R9 390  Gskill Ripjaws V DDR4 
Hard DriveCoolingOSMonitor
Samsung 850 Evo Corsair H115i Windows 10 Pro Asus  
KeyboardPowerCaseMouse
Generic EVGA NEX750 G1 Phanteks Eclipse P400 GSkill MX780 
  hide details  
Reply
post #8 of 9
uh... did you do a --propupd first? also, what does the rkhunter.log say about those warnings? rkhunter often picksup false-positives due to prelink issues.... you may have to run prelink /usr/bin/blah.
TAIPEI
(10 items)
 
AURORA
(13 items)
 
 
MotherboardGraphicsRAMHard Drive
ASRock X99 Extreme11 EVGA GTX 980 Superclocked 32GB 8x4GB Corsair LPX Samsung XP941  
Hard DriveCoolingOSMonitor
Western Digital 3TB RE Noctua NH-D15 Fedora 21 Linux Samsung S27D590C 
PowerCase
Seasonic SS-1200XP Cooler Master Cosmos II 
CPUMotherboardGraphicsRAM
Dual Quad-core L5430 2.66Ghz 12mb cache Intel 5000 chipset ATI ES1000 64GB FBDIMM DDR2 PC2-5300 667Mhz 
Hard DriveOSPower
WD3000FYYZ PERC H700 w/ 512MB cache CentOS 7.2.1511 950W x2 
  hide details  
Reply
TAIPEI
(10 items)
 
AURORA
(13 items)
 
 
MotherboardGraphicsRAMHard Drive
ASRock X99 Extreme11 EVGA GTX 980 Superclocked 32GB 8x4GB Corsair LPX Samsung XP941  
Hard DriveCoolingOSMonitor
Western Digital 3TB RE Noctua NH-D15 Fedora 21 Linux Samsung S27D590C 
PowerCase
Seasonic SS-1200XP Cooler Master Cosmos II 
CPUMotherboardGraphicsRAM
Dual Quad-core L5430 2.66Ghz 12mb cache Intel 5000 chipset ATI ES1000 64GB FBDIMM DDR2 PC2-5300 667Mhz 
Hard DriveOSPower
WD3000FYYZ PERC H700 w/ 512MB cache CentOS 7.2.1511 950W x2 
  hide details  
Reply
post #9 of 9
Quote:
Originally Posted by transhour;13232135 
check the log at /var/log/rkhunter.log, use this command:

sudo gedit /var/log/rkhunter.log

or if you prefer to keep it cli:

sudo nano /var/log/rkhunter.log

i installed it, it gave me the same type of errors, looked in the log, nothing stood out, nothing to really note why they were flagged...dunno really, since it didn't find anything, and they are just warnings, assuming you can live with it?

you dont want to view files with a text EDITOR smile.gif risk screwing them up on accident and you gotta open them back up to see what it actually said and **** like that... just use a pager like less or more
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
Kinda meh now...
(13 items)
 
  
CPUMotherboardGraphicsRAM
PhII 940 BE asus M4N82 Deluxe 2x 8800gts(g92) 2x 1g ocz ddr2 1066 
Hard DriveOptical DriveOSMonitor
/dev/sd[abc] /dev/sr0 WinXP/Linux 22in acer 
PowerCaseMouseMouse Pad
950w rosewill timebomb Antec 900 (2small) Voodoo Deathadder (RED!) X-Trac Pads Ripper XL 
  hide details  
Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Linux, Unix
Overclock.net › Forums › Software, Programming and Coding › Operating Systems › Linux, Unix › ubuntu rkhunter warnings !!