rkhunter output

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

rkhunter output

Carl Hartung
Hi All,

I've just installed rkhunter-1.2.7-16, updated it and scanned my 10.1
installation. It did a 'hidden file' check and alerted me to what appeared to
be an old password lock file from May, which I deleted. It also said to
"check /dev/.udev".

Okay, I've "checked" and the directory is there... listed below. My question
is this: What are these items and do they belong there?

TIA & regards,

Carl

linux:/dev/.udev # l
total 4
drwxr-xr-x  3 root root   80 2006-09-22 13:11 ./
drwxr-xr-x 12 root root 8160 2006-09-22 13:11 ../
drwxr-xr-x  2 root root  660 2006-09-22 09:40 db/
-rw-r--r--  1 root root    5 2006-09-22 13:11 uevent_seqnum

linux:/dev/.udev/db # l
total 124
drwxr-xr-x 2 root root 660 2006-09-22 09:40 ./
drwxr-xr-x 3 root root  80 2006-09-22 13:11 ../
-rw-r--r-- 1 root root 212 2006-09-22 05:39 block@hda
-rw-r--r-- 1 root root 385 2006-09-22 05:39 block@hda@hda1
-rw-r--r-- 1 root root 423 2006-09-22 05:39 block@hda@hda2
-rw-r--r-- 1 root root 423 2006-09-22 05:39 block@hda@hda3
-rw-r--r-- 1 root root 215 2006-09-22 05:39 block@hdb
-rw-r--r-- 1 root root 333 2006-09-22 05:39 block@hdb@hdb1
-rw-r--r-- 1 root root 435 2006-09-22 05:39 block@hdb@hdb10
-rw-r--r-- 1 root root 435 2006-09-22 05:39 block@hdb@hdb11
-rw-r--r-- 1 root root 435 2006-09-22 05:39 block@hdb@hdb12
-rw-r--r-- 1 root root 428 2006-09-22 05:39 block@hdb@hdb2
-rw-r--r-- 1 root root 228 2006-09-22 05:39 block@hdb@hdb3
-rw-r--r-- 1 root root 376 2006-09-22 05:39 block@hdb@hdb5
-rw-r--r-- 1 root root 376 2006-09-22 05:39 block@hdb@hdb6
-rw-r--r-- 1 root root 432 2006-09-22 05:39 block@hdb@hdb7
-rw-r--r-- 1 root root 432 2006-09-22 05:39 block@hdb@hdb8
-rw-r--r-- 1 root root 432 2006-09-22 05:39 block@hdb@hdb9
-rw-r--r-- 1 root root  23 2006-09-22 05:39 class@input@input0@event0
-rw-r--r-- 1 root root  23 2006-09-22 05:39 class@input@input1@event1
-rw-r--r-- 1 root root 307 2006-09-22 05:39 class@input@input2@event2
-rw-r--r-- 1 root root 295 2006-09-22 05:39 class@input@input2@mouse0
-rw-r--r-- 1 root root  21 2006-09-22 05:39 class@input@mice
-rw-r--r-- 1 root root  41 2006-09-22 05:39 class@misc@device-mapper
-rw-r--r-- 1 root root  24 2006-09-22 05:39 class@sound@controlC0
-rw-r--r-- 1 root root  23 2006-09-22 05:39 class@sound@pcmC0D0c
-rw-r--r-- 1 root root  23 2006-09-22 05:39 class@sound@pcmC0D0p
-rw-r--r-- 1 root root  23 2006-09-22 05:39 class@sound@pcmC0D1p
-rw-r--r-- 1 root root  18 2006-09-22 09:40 class@sound@seq
-rw-r--r-- 1 root root  20 2006-09-22 05:39 class@sound@timer
-rw-r--r-- 1 root root  26 2006-09-22 05:39 class@usb_device@usbdev1.1
-rw-r--r-- 1 root root  26 2006-09-22 05:39 class@usb_device@usbdev1.2
-rw-r--r-- 1 root root  28 2006-09-22 05:39 class@usb_device@usbdev2.1

--
Check the headers for your unsubscription address
For additional commands, e-mail: [hidden email]
Security-related bug reports go to [hidden email], not here

Reply | Threaded
Open this post in threaded view
|

Re: rkhunter output

Carl Hartung
On Friday 22 September 2006 13:27, Carl Hartung wrote:
> Hi All,
>
> I've just installed rkhunter-1.2.7-16, updated it and scanned my 10.1
> installation. It did a 'hidden file' check and alerted me to what appeared
> to be an old password lock file from May, which I deleted. It also said to
> "check /dev/.udev".
>
> Okay, I've "checked" and the directory is there... listed below. My
> question is this: What are these items and do they belong there?

After looking a bit longer at the listing I posted, it appears this is a
primitive database of configured/initialized devices... gone Googling now.

regards,

Carl

--
Check the headers for your unsubscription address
For additional commands, e-mail: [hidden email]
Security-related bug reports go to [hidden email], not here