and what about tmp file in /dev? rkhunter report: * Filesystem checks Checking /dev for suspicious files... [ OK ] Scanning for hidden files... [ Warning! ] --------------- /dev/.tmp-22-0 /dev/.udev /etc/.pwd.lock --------------- Please inspect: /dev/.tmp-22-0 (block special (22/0)) Pavel Chalupa Dne ne 31. prosince 2006 13:37 Carlos E. R. napsal(a):
The Sunday 2006-12-31 at 11:47 +0100, Pavel Chalupa wrote:
invisible files detected by rkhunter you can see on fresh instalation which is completly disconnected (without ethernet NIC)
/dev/.udev/
/db/
I believe this is normal in udev. I don't know what it is used for. It is a virtual filesystem, they are created when needed (boot).
.pwd.lock (change time when system was installed)
Lock files are used by some applications when opening files.