Решил я полностью почистить выдачу rkhunter от ложных срабатываний. В прошлый раз я удалял лишние сообщения Differences found between sockstat and netstat output. Теперь возьмемся за это:
Warning: The file '/etc/passwd' exists on the system, but it is not present in the rkhunter.dat file.
Легкое исследование в гугле обнаруживает, что проблема проявляется в кроновских скриптах, но не при ручном запуске. Если же запустить вручную таким способом, то проблема все-таки проявляется – тут мы добавили каталог /etc в переменную $PATH:
> sudo PATH=${PATH}:/etc /usr/local/bin/rkhunter --report-warnings-only --check --nocolors --skip-keypress
Warning: The file '/etc/passwd' exists on the system, but it is not present in the rkhunter.dat file.
Значит, дело в переменной $PATH ? Попробуем записать наш периодический скрипт /etc/periodical/daily/501.rkhunter вот таким образом:
#!/bin/sh PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin rkhunter --update --nocolors PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin rkhunter --report-warnings-only --check --nocolors --skip-keypress
И посмотрим, что пришлет rkhunter в следующий раз! У меня он ничего не прислал, значит все отлично.
http://permalink.gmane.org/gmane.comp.security.rkhunter.user/2584
USER_FILEPROP_FILES_DIRS=”/etc/passwd” – будет отмечать изменения файла
EXISTWHITELIST=”/etc/passwd” – the file to be monitored if it exists
Good morning! I stumbled upon some intriguing news in the crypto currency domain ! Some think tanks in the cryptocurrency community have kindly shared some insider info that a new crypto coin is being finalised and, it is collectively developed by the major UK law firms ! Purportedly, its name is LAWesome coin! It would be great if anybody into cryptocurrency on this online forum could share the latest updates on this coin. I would particularly, love to get this coin during the course of the ICO and take part in the bounty hunt to obtain some free coins also. Alas, there is an insufficiency of info on this LAWesome coin as I think that it is a being kept hush hush. I wonder what motivated the law firms to enter the cryptocurrency area? This move by the law firms will most certainly implant a dose of credibility and stability into the cryptocurrency field.
There are thousands of blogs that requires comments on them. What is the intention of blog comments?
Hey, I think your blog might be having browser compatibility issues.
When I look at your blog in Safari, it looks fine but when opening in Internet Explorer,
it has some overlapping. I just wanted to give you a quick heads up!
Other then that, fantastic blog!
I am now not certain where you are getting your info,
but good topic. I needs to spend a while learning more or working out more.
Thanks for fantastic info I was on the lookout for
this info for my mission.
Every weekend i used to pay a quick visit this site, as i wish for enjoyment, for the reason that this this web page conations
actually pleasant funny data too.