LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 04-27-2006, 01:05 PM   #1
Michael_aust
Member
 
Registered: Aug 2005
Location: Lancashire (United Kingdom)
Distribution: Debian Etch, on 686 machine.
Posts: 509

Rep: Reputation: 31
rkhunter displaying warning message


I ran rkhunter today and the following came up:

Code:
System checks
* Allround tests
   Checking hostname... Found. Hostname is debian
   Checking for passwordless user accounts... OK
   Checking for differences in user accounts... Found differences
   Info:
----------------------
< hsqldb:x:104:103:HSQLDB system user,,,:/var/lib/hsqldb:/bin/bash
----------------------
   Info: Some items have been added (items marked with '<')
   Checking for differences in user groups... Found differences
   Info:
----------------------
< hsqldb:x:103:
----------------------
   Info: Some items have been added (items marked with '<')
   Checking boot.local/rc.local file...
     - /etc/rc.local                                          [ Not found ]
     - /etc/rc.d/rc.local                                     [ Not found ]
     - /usr/local/etc/rc.local                                [ Not found ]
     - /usr/local/etc/rc.d/rc.local                           [ Not found ]
     - /etc/conf.d/local.start                                [ Not found ]
     - /etc/init.d/boot.local                                 [ Not found ]
   Checking rc.d files...                                     [ Not found ]
   Checking history files
     Bourne Shell                                             [ OK ]

* Filesystem checks
   Checking /dev for suspicious files...                      [ OK ]
   Scanning for hidden files...                               [ Warning! ]
---------------
Could anyone tell me if this is anything to worry about or not, the 'found differences' were red. Everything else siad it was clean or ok. The scan summary said everything was ok. So what does the above mean?

Thanks in advance

Michael
 
Old 04-27-2006, 02:40 PM   #2
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,570

Rep: Reputation: 171Reputation: 171
The messages mean that there's new user and new group. You have the accounts listed. If that's what you have added yourself, that's OK.
 
Old 04-27-2006, 03:13 PM   #3
Michael_aust
Member
 
Registered: Aug 2005
Location: Lancashire (United Kingdom)
Distribution: Debian Etch, on 686 machine.
Posts: 509

Original Poster
Rep: Reputation: 31
well as far as I kno I havent added any users or new groups. From looking at kuser I have the following useres:

Code:
root
daemon
bin
sys
sync
games
man
lp
mail
uucp
proxy
www-data
backup
list
irc
gnats
Debian-exim
identd
messagebus
hal
hsqldb
house (thats me)
nobody
These are the groups kuser shows I have

Code:
root
daemon
bin
sys
adm
tty
disk
lp
mail
news
uucp
man
proxy
kmem
dialout
fax
voice
cdrom
floppy
tape
sudo
audio
dip
www-data
backup
operator
list
irc
src
gnats
shadow
utmp
video
sasl
plugdev
staff
games
users
crontab
Debian-exim
hsqldb
messagebus
hal
powerdev
camera
scanner
house (thats me)
nogroup
does anything there look out of place or that i should not be there. I have no idea what im supposed to be looking for here sorry.
 
Old 04-27-2006, 03:17 PM   #4
Michael_aust
Member
 
Registered: Aug 2005
Location: Lancashire (United Kingdom)
Distribution: Debian Etch, on 686 machine.
Posts: 509

Original Poster
Rep: Reputation: 31
i have a feeling it may be hsqldb as it says its password was last changed today while all the oehters were last changed on the 19th of april and i did install libhsqldb-server today.

Could this be it?

Last edited by Michael_aust; 04-27-2006 at 03:23 PM.
 
Old 04-30-2006, 05:24 PM   #5
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,570

Rep: Reputation: 171Reputation: 171
Yes, absolutely.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Displaying a message when I start a new konsole. kponenation Slackware 6 08-13-2005 11:57 PM
Displaying message on FC1 roland_andrey Linux - Newbie 3 01-10-2005 06:50 PM
Displaying a message on terminal roland_andrey Linux - General 4 01-10-2005 04:53 PM
Getting Warning during rkhunter? BajaNick Linux - Security 8 09-12-2004 08:34 PM
why warning message is appear? eye Red Hat 3 10-22-2003 09:14 AM


All times are GMT -5. The time now is 12:31 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration