Re: [Rkhunter-users] False warnings on FreeBSD
Brought to you by:
dogsbody
From: John H. <joh...@pl...> - 2007-12-16 22:52:23
|
On Sat, 2007-12-15 at 15:13 +0100, AnMaster wrote: > > On my FreeBSD I get this in the log file of rkhunter. I don't > understand what the warning is for, the log file doesn't explain it. > > [13:58:05] Performing check for possible rootkit strings > [13:58:05] Info: Starting test name 'possible_rkt_strings' > [13:58:05] Warning: Checking for possible rootkit strings [ Warning ] > [13:58:05] No system startup files found. > [13:58:05] > The warning is because most systems have some form of system startup files (typically in /etc/init.d or /etc/rc.d). You can set this in the rkhunter.conf file (SYSTEM_RC_DIR). > Another one is this. As far as I know it is normal for the psedo interface pflog > to be promisc? It is used for the pf firewall on FreeBSD. (FreeBSD supports > three different firewalls) > [13:59:07] Checking for promiscuous interfaces [ Warning ] > [13:59:07] Warning: Possible promiscuous interfaces: > [13:59:07] 'ifconfig' command output: pflog0: > Fixed in CVS. Previously only OpenBSD was checked. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: Joh...@pl... Fax: +44 (0)1752 233839 |