-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Sunday 2006-12-31 at 13:59 +0100, Pavel Chalupa wrote:
and what about tmp file in /dev?
rkhunter report: ...
/dev/.tmp-22-0 /dev/.udev /etc/.pwd.lock --------------- Please inspect: /dev/.tmp-22-0 (block special (22/0))
I have no idea, but 22/0 is hdc (see /usr/src/linux/Documentation/devices.txt): 22 block Second IDE hard disk/CD-ROM interface 0 = /dev/hdc Master: whole disk (or CD-ROM) It may be a left-over from some process. You will have to ask somebody who really knows how udev works to say what are those files for, or if some of them shouldn't be there and a bug is involved. But I don't feel they are a security risk, just things rkhunter doesn't know about and hasn't been updated to know. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFFmAm4tTMYHG2NR9URAp54AJ4xA7DpQlSGvcqQLAQq354YZNanrgCeIKOP DThgZeO1Y7sjyJ/EHG7YF2Y= =b36L -----END PGP SIGNATURE-----