Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [rkhunter]

34 questions
56
votes
2 answers

rkhunter gives me a warning for "/usr/bin/lwp-request" - what should I do? [Debian 9]

So I just installed and ran rkhunter which shows me green OKs / Not founds for everything except for: /usr/bin/lwp-request, like so: /usr/bin/lwp-request [ Warning ] In the log it says: Warning: The command…
mYnDstrEAm
  • 4,008
  • 13
  • 49
  • 108
16
votes
2 answers

rkhunter warns me about root.rules

I run : :~$ sudo rkhunter --checkall --report-warnings-only One of the warnings I've got : Warning: Suspicious file types found in /dev: /dev/.udev/rules.d/root.rules: ASCII text and the root.rules contains : SUBSYSTEM=="block",…
4m1nh4j1
  • 1,823
  • 8
  • 29
  • 40
12
votes
3 answers

Invalid WEB_CMD configuration option: Relative pathname: "/bin/false"

I am on Ubuntu, I am trying to install rkhunter. I've tried apt-get install rkhunter success But then, I did rkhunter --update I kept getting Invalid WEB_CMD configuration option: Relative pathname: "/bin/false"
code-8
  • 412
  • 1
  • 6
  • 18
8
votes
2 answers

rkhunter warning about ssh root access when that access is not allowed on the system

I just ran rkhunter --check and all was good except this: Checking if SSH root access is allowed [ Warning] What does this warning mean? SSH root access is not allowed on this system. EDIT #1 Here is how my /etc/ssh/sshd_config is…
somethingSomething
  • 5,721
  • 18
  • 58
  • 98
4
votes
2 answers

rkhunter warns about chkconfig

I ran rkhunter and received the following warnings in its output: $ rkhunter --update $ rkhunter -c ... ... ... Performing file properties checks /sbin/chkconfig [ Warning ] In the…
Animesh
  • 1,957
  • 5
  • 22
  • 31
4
votes
1 answer

Mint 19 - rkhunter 1.4.6 won't update

System: Linux Mint 19 Cinnamon 64-bit, based on Ubuntu 18.04. RKHunter: packaged version 1.4.6-2. Unfortunately, when I try to update its database, I get error: $ sudo rkhunter --update [ Rootkit Hunter version 1.4.6 ] Checking rkhunter data…
Vlastimil Burián
  • 27,586
  • 56
  • 179
  • 309
4
votes
1 answer

Rkhunter warning: file properties have changed

I am testing rkhunter on a Ubuntu server 16.04 in Virtualbox. I received an email alert by rkhunter on the 11th of October, inviting me to "Please inspect this machine, because it may be infected". So I made a scan with rkhunter and found the…
Asarluhi
  • 317
  • 2
  • 5
  • 13
2
votes
1 answer

Rkhunter scan issue

I have a few false positive scans on my rkhunter. However I did a scan today and these results do kinda worry me, I have 8 warnings now. I will post the warnings that Im not sure about. /usr/sbin/runlevel […
Linuxuser75
  • 21
  • 2
2
votes
3 answers

rkhunter warnings: SSH protocol v1 + SSH root access allowed, fix?

How can I solve the following rkhunter warnings?: Checking if SSH root access is allowed [ Warning ] Checking if SSH protocol v1 is allowed [ Warning ] and what do they mean? Please, take into account that I'm a…
Harlequin
  • 23
  • 3
2
votes
1 answer

Is a `preloaded library` warning from `rkhunter` a reason to worry?

[17:16:52] Checking for preloaded libraries [ Warning ] [17:16:53] Warning: Found preloaded shared library: /usr/lib/arm-linux-gnueabihf/libarmmem-${PLATFORM}.so ######## #ls…
Vorac
  • 2,957
  • 8
  • 36
  • 53
2
votes
1 answer

rkhunter warning on /dev/shm/mono.*. Is this false positive?

rkhunter is giving warning on /dev/shm/mono.*. I couldn't find anywhere in the web reference to this file related to rkhunter warnings. [12:38:29] Checking /dev for suspicious file types [ Warning ] [12:38:29] Warning: Suspicious file…
João Pimentel Ferreira
  • 750
  • 1
  • 6
  • 16
2
votes
1 answer

rkhunter and unattended-upgrades

I have an Ubuntu 18.04 system running with rkhunter installed. I keep getting warnings in the rkhunter.log after unattended-upgrades has upgraded the system. The solution to this would be running rkhunter --propupd after every automatic upgrade. I…
Panki
  • 6,221
  • 2
  • 24
  • 33
2
votes
1 answer

RKHUNTER does not recognise common options

At the bottom of rkhunter.conf (I also tried placing it separately in rkhunter.conf.local), and after checking for invisible chars, Unknown configuration file option: CRON_DAILY_RUN="false" Unknown configuration file option:…
Gaia
  • 272
  • 1
  • 16
2
votes
2 answers

create a systemd startup script that delays 30 minutes

I tried to create a systemd startup script that starts an rkhunter scan 30 minutes after system start of my laptop, like this: [Unit] Description=starts rkhunter and displays any findings with zenity [Service] ExecStartPre=/bin/sleep…
rubo77
  • 27,777
  • 43
  • 130
  • 199
1
vote
1 answer

Scan hdd with rkhunter from live usb

I have older ASUS notebook with Debian 11 installation. If I run OS and especially when plug in network wire, then I got performance issues. I did advances memory test with Memtest86+, without any errors. Then I created kali-linux live usb to…
Hölderlin
  • 1,160
  • 5
  • 14
  • 34
1
2 3