New answers tagged rkhunter
To suppress the rkhunter warning, you can add a whitelist rule to /etc/rkhunter.conf.local: ALLOWDEVFILE=/dev/.udev/rules.d/root.rules
Updating files is often done by writing a new file in the same directory followed by renaming the file on top of the old file. This method is usually applied to everything installed through a package manager, but also to any update performed to executables and libraries even if updated for other reasons. This way of updating files ensure that any process ...
A changed inode number usually means the file has been replaced. It could as you say be due to an expected update. I'd verify the md5sums of those files match those of the distributed versions. If you have another comparable system around, it might be easiest to compare to that. Take a look at the accepted answer at rkhunter reports change in file ...
Top 50 recent answers are included