Resolved rkhunter issues

[Nathan Platt]

Morning Everyone,

I keep getting warnings coming from rkhunter, can i check with everyone if these are okay to ignore. The items in bold are the ones i'm worried about

[01:00:13] Info: The command 'rpm -qf --queryformat /usr/bin/egrep' gave error code 1.

[01:00:13] Info: The command 'rpm -qf --queryformat /usr/bin/fgrep' gave error code 1.

[01:00:14] Info: The command 'rpm -qf --queryformat /usr/bin/grep' gave error code 1.

[01:00:17] Info: The command 'rpm -qf --queryformat /usr/bin/mail' gave error code 1.

[01:00:18] Info: The command 'rpm -qf --queryformat /usr/bin/netstat' gave error code 1.

[01:00:19] Info: The command 'rpm -qf --queryformat /usr/bin/rpm' gave error code 1.

[01:00:20] Info: The command 'rpm -qf --queryformat /usr/bin/sed' gave error code 1.

[01:00:25] Info: The command 'rpm -qf --queryformat /usr/bin/mailx' gave error code 1.

[01:00:25] Info: Found 86 files in /usr/bin

[01:00:26] Info: The command 'rpm -qf --queryformat /usr/sbin/chkconfig' gave error code 1.

[01:00:27] Info: The command 'rpm -qf --queryformat /usr/sbin/ifconfig' gave error code 1.

[01:00:46] Info: The command 'rpm -qf --queryformat /usr/bin/egrep' gave error code 1.

[01:00:47] Info: The command 'rpm -qf --queryformat /usr/bin/fgrep' gave error code 1.

[01:00:48] Info: The command 'rpm -qf --queryformat /usr/bin/grep' gave error code 1.

[01:01:01] Info: The command 'rpm -qf --queryformat /usr/bin/mail' gave error code 1.

[01:01:03] Info: The command 'rpm -qf --queryformat /usr/bin/netstat' gave error code 1.

[01:01:08] Info: The command 'rpm -qf --queryformat /usr/bin/rpm' gave error code 1.

[01:01:08] Info: The command 'rpm -qf --queryformat /usr/bin/sed' gave error code 1.

[01:01:19] Info: The command 'rpm -qf --queryformat /usr/bin/mailx' gave error code 1.

[01:01:24] Info: The command 'rpm -qf --queryformat /usr/sbin/chkconfig' gave error code 1.

[01:02:21] Checking for hidden files and directories [ Warning ]

[01:02:21] Warning: Hidden file found: /etc/.updated: ASCII text

[01:02:21] Warning: Hidden file found: /usr/share/man/man1/..1.gz: gzip compressed data, from Unix, max compression

[01:02:21] Warning: Hidden file found: /usr/share/man/man5/.k5identity.5.gz: gzip compressed data, from Unix, max compression

[01:02:21] Warning: Hidden file found: /usr/share/man/man5/.k5login.5.gz: gzip compressed data, from Unix, max compression

[01:02:22] Checking version of Apache [ Warning ]

[01:02:22] Warning: Application 'httpd', version '2.4.6', is out of date, and possibly a security risk.

[01:02:23] Applications checks...

[01:02:23] Applications checked: 8

[01:02:23] Suspect applications: 1

[01:02:23]

[01:02:23] The system checks took: 1 minute and 51 seconds

 

[IgorG]

I see nothing suspicious here.
Command 'rpm -qf ...' determines which package the file belongs to. It seems that the listed files do not belong to any rpm package for some reason.
I'd suggest you check output of this command manually, for example:

# rpm -qf /usr/bin/sed
# rpm -qf /usr/bin/grep

Also here is warning about a bit outdated httpd package.