Results 1 to 7 of 7

Thread: rkhunter log

  1. #1
    Join Date
    Jan 2020
    Beans
    4

    rkhunter log

    Hello everyone! I'm gonna attach my rkhunter log here, i'm new into linux and idk if should i worry or not and how to solve those "warnings", maybe somenone can help me thank you !

    https://paste.ubuntu.com/p/f43FMPXpPJ/

  2. #2
    Join Date
    Feb 2015
    Beans
    Hidden!
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: rkhunter log

    Here are a couple of threads I've been involved in that have some info and discussion of rkhunter ...
    --rkhunter warnings--, (2018)
    --rkhunter error--
    (2019)

    Both blue links above may have some information of interest to your issues. There's also some discussion of how useful or otherwise rkhunter is. It has a reputation for giving false positives. It definitely needs researching and knowledge to be of use to anyone.

    Having checked over your results, I'd be more interested to see the contents or /var/log/rkhunter.log and searching for the warnings there; you will get better information as to what is going on from there rather than the straight terminal output posted here.

    Opening rkhunter.log in a text editor (read-only) and using the search function will give a better overview of any warnings. That is search for the word "Warning" in the log file.

    Regards, yeti.

  3. #3
    Join Date
    Jan 2020
    Beans
    4

    Re: rkhunter log

    I don't know how to open the log in a text-editor .. only in terminal..

  4. #4
    Join Date
    Feb 2015
    Beans
    Hidden!
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: rkhunter log

    Ok, from the terminal enter the next command, I am assuming you're on a stock Ubuntu installation (gnome DE)...
    Code:
    gedit /var/log/rkhunter.log
    The editor will open with the file as read only.

    Use the find option in the editor menus to search for the word "Warning".

    Edit: note the last line of your terminal output posted above ...
    Please check the log file (/var/log/rkhunter.log)
    Last edited by yetimon_64; 2 Weeks Ago at 01:46 PM.

  5. #5
    Join Date
    Jan 2020
    Beans
    4

    Re: rkhunter log

    Ok, let's see

    [13:52:25] /usr/bin/lwp-request [ Warning ]
    [13:52:25] Warning: The command '/usr/bin/lwp-request' has been replaced by a script: /usr/bin/lwp-request: Perl script text executable
    Checking for suspicious (large) shared memory segments [ Warning ]
    [13:54:09] Warning: The following suspicious (large) shared memory segments have been found:
    [13:54:09] Process: /usr/bin/nautilus-desktop PID: 2811 Owner: batman Size: 64MB (configured size allowed: 1,0MB)
    [13:54:09] Process: /usr/bin/nautilus-desktop PID: 2811 Owner: batman Size: 16MB (configured size allowed: 1,0MB)
    [13:54:09] Process: /usr/lib/firefox/firefox PID: 3314 Owner: batman Size: 3,5MB (configured size allowed: 1,0MB)
    [13:54:09] Process: /usr/lib/firefox/firefox PID: 3314 Owner: batman Size: 3,5MB (configured size allowed: 1,0MB)
    [13:54:09] Process: /usr/lib/gnome-terminal/gnome-terminal-server PID: 3806 Owner: batman Size: 4,0MB (configured size allowed: 1,0MB)

  6. #6
    Join Date
    Feb 2015
    Beans
    Hidden!
    Distro
    Xubuntu 18.04 Bionic Beaver

    Re: rkhunter log

    That doesn't look bad at all. The first warning is a script replacement and can be whitelisted.

    The first link in my first post will show you how to whitelist that file lwp-request and gives more information about rkhunter usage. It would pay you to carefully read both those links above, the second will give you an idea why rkhunter is not always of much use. "rkhunter" is not a new user friendly tool in my opinion. It is of more use to a system admin type person who understands the system than it is for a desktop user.

  7. #7
    Join Date
    Jan 2020
    Beans
    4

    Re: rkhunter log

    Thank you!

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •