FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.

» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian Kernel

LinkBack Thread Tools
Old 02-17-2012, 02:28 PM
Martin von Wittich
Default Bug#655175: rkhunter error message related?

We're getting a rkhunter error message on some of our servers; as
/run/initramfs is renamed to /dev/.initramfs in the initramfs init
script, I think this might be related:

[06:25:24] Checking for hidden files and directories [ Warning ]
[06:25:24] Warning: Hidden file found: /dev/.initramfs: setuid setgid
sticky directory

The permissions of /dev/.initramfs on the affected server:

root@iserv:~# LANG=C ls -ld /dev/.initramfs/
drwsrwsrwt 2 root root 40 Feb 16 09:16 /dev/.initramfs/

Of our 49 squeeze servers, 2 are affected. None of our 438 lenny servers
are affected, so I'd say this is a) a squeeze bug and b) pretty rare

If I can help in any way to track this down, tell me what is should look
for. In the meantime I will configure our rkhunters to ignore
/dev/.initramfs permissions.

To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4F3E7235.6060200@iserv.eu">http://lists.debian.org/4F3E7235.6060200@iserv.eu

Thread Tools

All times are GMT. The time now is 08:07 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org