Mailinglist Archive: opensuse (1355 mails)

< Previous Next >
Re: [opensuse] rkhunter warning about shared memory segments
  • From: Per Jessen <per@xxxxxxxxxxxx>
  • Date: Fri, 08 Jun 2018 09:05:46 +0200
  • Message-id: <pfd9sa$ur1$1@saturn.local.net>
stakanov wrote:

Hardware: Lenovo X201 (ironlake with 8 GB Ram).
OS: Leap 15 (upgraded from 42.3 (the latter was a fresh install).
Program: rkhunter (issues a warning)

Warning: The following suspicious shared memory segments have been
found:

If you google the message, you see quite a few hits - for instance:
https://bugzilla.redhat.com/show_bug.cgi?id=1472299

A quick scan of that report suggests(!) the warnings you are getting
are false positives that belong on a whitelist.

I installed and ran rkhunter om my test system, and I got these:

[08:47:50] Warning: The following suspicious shared memory segments have been
found:
[08:47:50] Process: /usr/lib64/firefox/firefox PID: 7887 Owner:
per
[08:47:50] Process: /usr/lib64/firefox/firefox PID: 7887 Owner:
per
[08:47:50] Process: /usr/lib64/firefox/firefox PID: 7887 Owner:
per
[08:47:50] Process: /usr/bin/konsole PID: 7910 Owner: per
[08:47:50] Process: /usr/bin/dolphin PID: 7901 Owner: per
[08:47:50] Process: /usr/lib64/firefox/firefox PID: 7887 Owner:
per
[08:47:50] Process: /usr/bin/ksmserver PID: 7597 Owner: per
[08:47:50] Process: /usr/bin/kpat PID: 15969 Owner: per
[08:47:50] Process: /usr/bin/gimp-2.8 PID: 16023 Owner: per




--
Per Jessen, Zürich (18.1°C)
http://www.dns24.ch/ - free dynamic DNS, made in Switzerland.


--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References