LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-25-2010, 05:11 AM   #1
Amdx2_x64
Member
 
Registered: Jun 2008
Distribution: Left LQ. Mods are too Rude!
Posts: 598

Rep: Reputation: 50
Rkhunter false positives?


Is this a false positive from rkhunter?

/usr/bin/curl [ Warning ]
/usr/bin/ldd [ Warning ]

Chkrootkit came back ok. Running ClamAV and will only add that here if it finds anything. I just neve remember seeing these before.

This is in Ubuntu 10.10
 
Old 10-25-2010, 12:29 PM   #2
Amdx2_x64
Member
 
Registered: Jun 2008
Distribution: Left LQ. Mods are too Rude!
Posts: 598

Original Poster
Rep: Reputation: 50
Well I can't find any specific information on just these two. The only thing that I can find is when someone has many other files that are compromised and those show up. I don't have any issue with anything else. So at this time I am going to just assume that these are false positives.
 
Old 10-25-2010, 05:19 PM   #3
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,409
Blog Entries: 55

Rep: Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582Reputation: 3582
Quote:
Originally Posted by Amdx2_x64 View Post
Is this a false positive from rkhunter?
/usr/bin/curl [ Warning ]
/usr/bin/ldd [ Warning ]
Reading rkhunter.log (, the rkhunter.conf comments, the docs RKH comes with and the rkhunter-users mailing list archives on Sourceforge) should give you some clues.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Possible false positive with rkhunter the trooper Linux - Security 4 01-06-2010 08:42 AM
Xfce on Slackware: Positives and Negatives. cwizardone Slackware 28 09-21-2009 11:42 AM
unable to remove rkhunter false positives. permalac Linux - Security 2 11-07-2008 01:23 PM
apache / mod_security: fixing false positives jrtayloriv Linux - Server 3 03-01-2008 04:03 PM
Chkrootkit False Positives Sabicas Linux - Software 0 08-03-2004 12:42 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:17 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration