RKHunter warnings

Discussion in 'Server Operation' started by leonep, Apr 30, 2014.

  1. leonep

    leonep New Member

    Hi guys i have this report from RKHunter.There is a lot of warnings.
    Someone can help me to find the reason? thank you !!


    --------------------- Start Rootkit Hunter Update ---------------------
    [ Rootkit Hunter version 1.4.2 ]

    Checking rkhunter data files...
    Checking file mirrors.dat [ No update ]
    Checking file programs_bad.dat [ No update ]
    Checking file backdoorports.dat [ No update ]
    Checking file suspscan.dat [ No update ]
    Checking file i18n/cn [ No update ]
    Checking file i18n/de [ No update ]
    Checking file i18n/en [ No update ]
    Checking file i18n/tr [ No update ]
    Checking file i18n/tr.utf8 [ No update ]
    Checking file i18n/zh [ No update ]
    Checking file i18n/zh.utf8 [ No update ]

    ---------------------- Start Rootkit Hunter Scan ----------------------
    Warning: The file properties have changed:
    File: /sbin/fsck
    Current inode: 57583 Stored inode: 65561
    Warning: The file properties have changed:
    File: /sbin/nologin
    Current inode: 57593 Stored inode: 65599
    Warning: The file properties have changed:
    File: /bin/dmesg
    Current inode: 49888 Stored inode: 51033
    Warning: The file properties have changed:
    File: /bin/kill
    Current inode: 49890 Stored inode: 51035
    Warning: The file properties have changed:
    File: /bin/logger
    Current inode: 49893 Stored inode: 51053
    Warning: The file properties have changed:
    File: /bin/login
    Current inode: 49894 Stored inode: 51036
    Warning: The file properties have changed:
    File: /bin/more
    Current inode: 49896 Stored inode: 51038
    Warning: The file properties have changed:
    File: /bin/mount
    Current inode: 49897 Stored inode: 51039
    Warning: The file properties have changed:
    File: /usr/bin/kill
    Current inode: 20804 Stored inode: 20561
    Warning: The file properties have changed:
    File: /usr/bin/logger
    Current inode: 20562 Stored inode: 20439
    Warning: The file properties have changed:
    File: /usr/bin/whereis
    Current inode: 20744 Stored inode: 20443
    Warning: The SSH and rkhunter configuration options should be the same:
    SSH configuration option 'PermitRootLogin': no
    Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': unset
    Warning: Suspicious file types found in /dev:
    /dev/nul: ASCII text
    /dev/shm/7gbhujb54g8z9hu43jre8: data
    Warning: Hidden file found: /bin/.passwords: ASCII text

    ----------------------- End Rootkit Hunter Scan -----------------------
     
  2. leonep

    leonep New Member

    i continue to reiceve this messages . the services seems to work correctly .
    what can i do?
     

Share This Page