• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Resolved rkhunter issues

Nathan Platt

New Pleskian
Morning Everyone,

I keep getting warnings coming from rkhunter, can i check with everyone if these are okay to ignore. The items in bold are the ones i'm worried about

[01:00:13] Info: The command 'rpm -qf --queryformat /usr/bin/egrep' gave error code 1.

[01:00:13] Info: The command 'rpm -qf --queryformat /usr/bin/fgrep' gave error code 1.

[01:00:14] Info: The command 'rpm -qf --queryformat /usr/bin/grep' gave error code 1.

[01:00:17] Info: The command 'rpm -qf --queryformat /usr/bin/mail' gave error code 1.

[01:00:18] Info: The command 'rpm -qf --queryformat /usr/bin/netstat' gave error code 1.

[01:00:19] Info: The command 'rpm -qf --queryformat /usr/bin/rpm' gave error code 1.

[01:00:20] Info: The command 'rpm -qf --queryformat /usr/bin/sed' gave error code 1.

[01:00:25] Info: The command 'rpm -qf --queryformat /usr/bin/mailx' gave error code 1.

[01:00:25] Info: Found 86 files in /usr/bin

[01:00:26] Info: The command 'rpm -qf --queryformat /usr/sbin/chkconfig' gave error code 1.

[01:00:27] Info: The command 'rpm -qf --queryformat /usr/sbin/ifconfig' gave error code 1.


[01:00:46] Info: The command 'rpm -qf --queryformat /usr/bin/egrep' gave error code 1.

[01:00:47] Info: The command 'rpm -qf --queryformat /usr/bin/fgrep' gave error code 1.

[01:00:48] Info: The command 'rpm -qf --queryformat /usr/bin/grep' gave error code 1.

[01:01:01] Info: The command 'rpm -qf --queryformat /usr/bin/mail' gave error code 1.

[01:01:03] Info: The command 'rpm -qf --queryformat /usr/bin/netstat' gave error code 1.

[01:01:08] Info: The command 'rpm -qf --queryformat /usr/bin/rpm' gave error code 1.

[01:01:08] Info: The command 'rpm -qf --queryformat /usr/bin/sed' gave error code 1.

[01:01:19] Info: The command 'rpm -qf --queryformat /usr/bin/mailx' gave error code 1.

[01:01:24] Info: The command 'rpm -qf --queryformat /usr/sbin/chkconfig' gave error code 1.

[01:02:21] Checking for hidden files and directories [ Warning ]

[01:02:21] Warning: Hidden file found: /etc/.updated: ASCII text

[01:02:21] Warning: Hidden file found: /usr/share/man/man1/..1.gz: gzip compressed data, from Unix, max compression

[01:02:21] Warning: Hidden file found: /usr/share/man/man5/.k5identity.5.gz: gzip compressed data, from Unix, max compression

[01:02:21] Warning: Hidden file found: /usr/share/man/man5/.k5login.5.gz: gzip compressed data, from Unix, max compression

[01:02:22] Checking version of Apache [ Warning ]

[01:02:22] Warning: Application 'httpd', version '2.4.6', is out of date, and possibly a security risk.


[01:02:23] Applications checks...

[01:02:23] Applications checked: 8

[01:02:23] Suspect applications: 1

[01:02:23]

[01:02:23] The system checks took: 1 minute and 51 seconds
 
I see nothing suspicious here.
Command 'rpm -qf ...' determines which package the file belongs to. It seems that the listed files do not belong to any rpm package for some reason.
I'd suggest you check output of this command manually, for example:

# rpm -qf /usr/bin/sed
# rpm -qf /usr/bin/grep

Also here is warning about a bit outdated httpd package.
 
Back
Top