After a number of attacks intercepted by a router firewall, plus an inadvertent opening of a suspect e-mail message, I decided that I really ought to do something to guard against rootkits, so installed rkhunter.
I started things up in accordance with the advice from Synaptic:
Please run rkhunter --propupd before running
rkhunter -c to check your files.
and was pleased to see the clean bill of health my system was getting. However, as the check continued one of the sections contained two warnings:
Performing group and account checks
Checking for passwd file [ Found ]
Checking for root equivalent (UID 0) accounts [ None found ]
Checking for passwordless accounts [ None found ]
Checking for passwd file changes [ Warning ]
Checking for group file changes [ Warning ]
Checking root account shell history files [ OK ]
Despite these warnings, the log file at /var/log/rkhunter.log appears to be empty.
Hopefully the two warnings are false positives, but if not, what do I need to do about them?
