Re: [rkhunter] coyote.coyote.den - Daily report
- Date: Mon, 27 Nov 2017 22:39:45 +0000
- From: Brian <ad44@xxxxxxxxxxxxxxx>
- Subject: Re: [rkhunter] coyote.coyote.den - Daily report
On Mon 27 Nov 2017 at 16:56:15 -0500, Gene Heskett wrote:
> On Monday 27 November 2017 15:57:34 Brian wrote:
> > On Mon 27 Nov 2017 at 15:46:55 -0500, Gene Heskett wrote:
> > > On Monday 27 November 2017 14:35:17 root wrote:
> > >
> > > Installed new firefox-esr yesterday, from the wheezy repos. Today,
> > > rkhunter has a cow:
> > [rkhunter nonsense snipped]
> > > How should I restore?
> > Restore what?
> An obviously contaminated firefox-esr. Or whatever in this list is
> contaminated: Its to complete list from the last wheezy update.
> Turns out that rkhunter looked over firefox-esr on its previous run and
> apparently gave it a passing grade. So I have to assume its something in
> yesterdays list:
[Long list snipped]
I'd ignore it. Better still, purge rkhunter from the system. It is
renowned for giving false positives. There is no well-substantiated
account of it ever discovering anything of consequence.