[Solved] Security Chkrootkit daily weekly logs

[doktor5000]

Hi,
Been using Mageia4 for a few days now, all going well so far. The security is set to standard. I am concerned by the output of my security weekly log though. It says it can not find chkrootkit, and lists - /var/tmp/systemd-rtkit-daemon.service-XYyIaXO/tmp as a world writable.

Code: Select all

*** Security Check, Apr 03 17:48:46 ***
*** Check type: weekly ***
*** Check executed from: /etc/cron.weekly/msec ***
Report summary:
Test started: Apr 03 17:48:46
Test finished: Apr 03 17:48:50
Total of Suid Root files: 28
Total of Sgid files: 15
Total of World Writable files: 3
Total of Un-owned files: 0
Total of Un-owned group files: 0
Total of SUID files with controlled MD5 checksum: 28
Total of installed packages: 2000
Chkrootkit check: skipped (chkrootkit not found)

Detailed report:

Security Warning: World Writable files found :
      - /var/lib/lock/sane
      - /var/lib/xkb
      - /var/tmp/systemd-rtkit-daemon.service-XYyIaXO/tmp

Chkrootkit check skipped: chkrootkit not found

[patch]

Apologies for the post, googled chkrootkit and it appears it is no longer installed as it kept giving false posotives. Perhaps the check should be deleted, then newbies like me wont worry.

[claire]

If you want it to run chkrootkit you just need to install it, the package is called chkrootkit.
You can do so using the control center or with 'urpmi chkrootkit' as root.

It's likely that those files need to be whitelisted or their permissions checked, you could create a bug report for that.
https://bugs.mageia.org