Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

In relation to my previous question. I have this Warning again from both RKHunter and Chkrootkit.

My VPS has been turned off for how many weeks, until I turned it on again to deploy my website. After the deployment, I did the RKhunter Scan and Chkrootkit and it warned me about;

using Chkrootkit...

The following suspicious files and directories were found:
/usr/lib/pymodules/python2.7/.path

While in RKhunter...

Warned about deleted files being used in...
/usr/lib/pymodules/python2.7/.path

I am exactly clueless on how to deal with the issue.

Is this False Positive? Will I just add it to the white list?

share|improve this question

1 Answer 1

Most probably false positive (depends of its content). Got the same warning on two different clean machines (Ubuntu 12.04 & Debian 7).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.