rkhunter
報告した
[17:15:45] Checking for hidden files and directories [ Warning ]
[17:15:45] Warning: Hidden file found: /etc/.updated: ASCII text
[17:15:45] Warning: Hidden file found: /usr/share/man/man5/.k5identity.5.gz: gzip compressed data, max compression, from Unix, truncated
[17:15:45] Warning: Hidden file found: /usr/share/man/man5/.k5login.5.gz: gzip compressed data, max compression, from Unix, truncate
ファイルを見る
vorac@msi:/usr/share/man/man5$ ll .k5*
-rw-r--r-- 1 root root 42 Nov 13 20:07 .k5identity.5.gz
-rw-r--r-- 1 root root 39 Nov 13 20:07 .k5login.5.gz
vorac@msi:/usr/share/man/man5$ file .k5*
.k5identity.5.gz: gzip compressed data, max compression, from Unix, truncated
.k5login.5.gz: gzip compressed data, max compression, from Unix, truncated
vorac@msi:/usr/share/man/man5$ pacman -F .k5*
core/krb5 1.19.2-2 [installed]
usr/share/man/man5/.k5identity.5.gz
core/krb5 1.19.2-2 [installed]
usr/share/man/man5/.k5login.5.gz
これは悪意のあるかもしれませんか?
答え1
/etc/.updated
使用されたものsystemd-update-done.service
そして/usr/share/man/man5/
計画通りman
。
ALLOWHIDDENFILE=/path/to/hidden/file
configを使用してrkhinter警告を無効にできます。