Warning: The syslog daemon is not running.
Warning: Suspicious file types found in /dev:
/dev/md/autorebuild.pid: ASCII text
/dev/shm/sem.lastpassffsemaphore: data

cat /dev/md/autorebuild.pid
708
yum whatprovides */autorebuild.pid
give no matches.

Google gives mdadm as possible culprit

mdadm is installed, no raid on that box.





--
Regards,
Frank
"Jack of all, fubars"

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Am 30.06.2012 10:02, schrieb Frank Murphy:
> Warning: The syslog daemon is not running.
> Warning: Suspicious file types found in /dev:
> /dev/md/autorebuild.pid: ASCII text
> /dev/shm/sem.lastpassffsemaphore: data
>
> cat /dev/md/autorebuild.pid
> 708
> yum whatprovides */autorebuild.pid
> give no matches.
>
> Google gives mdadm as possible culprit
> mdadm is installed, no raid on that box.

[root@srv-rhsoft:~]$ cat /etc/rkhunter.conf.local | grep autor
ALLOWDEVFILE=/dev/md/autorebuild.pid

too few packagers are using rkhunter
such false positives happens often after updates

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org