Clamav tell's me rkhunter is a worm!
Frank Murphy
frankly3d at gmail.com
Thu Apr 10 22:08:11 UTC 2014
On Thu, 10 Apr 2014 22:46:56 +0100
John Horne <john.horne at plymouth.ac.uk> wrote:
> On Thu, 2014-04-10 at 09:53 +0100, Frank Murphy wrote:
> > /usr/bin/rkhunter: Osx.Worm.Inqtana-3 FOUND
> > /usr/bin/rkhunter: moved to '/var/cache/clam/rkhunter.001'
> >
> The ClamAV Inqtana-3 check looks for a couple of phrases (actually
> parts of filenames) which also occur in rkhunter as part of its
> Inqtana checks. I would say the ClamAV check is too simple, whereas
> rkhunter actually tests that the filenames exist.
>
So If I exclude rkhunter in clamav should be ok.
___
Regards
Frank
frankly3d.com
More information about the users
mailing list