Mailinglist Archive: opensuse-security (49 mails)

< Previous Next >
Re: [opensuse-security] Security report from rkhunter on default install of openSUSE 10.2
  • From: "Carlos E. R." <robin.listas@xxxxxxxxxxxxxx>
  • Date: Sun, 31 Dec 2006 20:04:23 +0100 (CET)
  • Message-id: <Pine.LNX.4.64.0612311959270.18526@xxxxxxxxxxxxxxxx>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Sunday 2006-12-31 at 13:59 +0100, Pavel Chalupa wrote:

> and what about tmp file in /dev?
>
> rkhunter report:
...

>  /dev/.tmp-22-0
> /dev/.udev /etc/.pwd.lock
> ---------------
> Please inspect:  /dev/.tmp-22-0 (block special (22/0))


I have no idea, but 22/0 is hdc
(see /usr/src/linux/Documentation/devices.txt):

22 block Second IDE hard disk/CD-ROM interface
0 = /dev/hdc Master: whole disk (or CD-ROM)

It may be a left-over from some process.


You will have to ask somebody who really knows how udev works to say what
are those files for, or if some of them shouldn't be there and a bug is
involved. But I don't feel they are a security risk, just things rkhunter
doesn't know about and hasn't been updated to know.


- --
Cheers,
Carlos E. R.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFFmAm4tTMYHG2NR9URAp54AJ4xA7DpQlSGvcqQLAQq354YZNanrgCeIKOP
DThgZeO1Y7sjyJ/EHG7YF2Y=
=b36L
-----END PGP SIGNATURE-----
< Previous Next >