Hello List rkhunter _______ - am getting what, hopefully, are False positives, like : ........... Warning: Package manager verification has failed: File: /etc/rkhunter.conf The file hash value has changed The file size has changed The file modification time has changed Warning: The following processes are using suspicious files: Command: cron UID: 0 PID: 3445 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: cron UID: 0 PID: 21947 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: egrep UID: 0 PID: 17335 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: rkhunter UID: 0 PID: 22217 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: run-crons UID: 0 PID: 21949 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: sh UID: 0 PID: 21948 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: sort UID: 0 PID: 17336 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: suse.de-rkhunte UID: 0 PID: 22214 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Command: uniq UID: 0 PID: 17337 Pathname: /etc/crontab Possible Rootkit: Unknown rootkit Warning: The SSH and rkhunter configuration options should be the same: SSH configuration option 'PermitRootLogin': no Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': yes Warning: The SSH configuration option 'Protocol' has not been set. The default value may be '2,1', to allow the use of protocol version 1. Warning: Suspicious file types found in /dev: /dev/.sysconfig/network/started-remotefs: ASCII text /dev/.sysconfig/network/ifup-eth0: ASCII text /dev/.sysconfig/network/if-eth0: ASCII text /dev/.sysconfig/network/config-eth0: ASCII text ................... - any opinions, please, does this look all right ? thanks best regards Ellan -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org