rkhunter gives me a warning for "/usr/bin/lwp-request" - what should I do? [Debian 9]
63
votes
2
answers
77995
views
So I just installed and ran *rkhunter* which shows me green OKs / Not founds for everything except for: **/usr/bin/lwp-request**, like so:
/usr/bin/lwp-request [ Warning ]
In the log it says:
Warning: The command '/usr/bin/lwp-request' has been replaced by a
script: /usr/bin/lwp-request: Perl script text executable
I already ran
rkhunter --propupd
and sudo apt-get update && sudo apt-get upgrade
which didn't help. I installed Debian 9.0 just a few days ago and am a newcomer to Linux.
Any suggestions on what to do?
----
**Edit**: Furthermore *chkrootkit* gives me this:
The following suspicious files and directories were found:
/usr/lib/mono/xbuild-frameworks/.NETPortable
/usr/lib/mono/xbuild-frameworks/.NETPortable/v5.0/SupportedFrameworks/.NET Framework 4.6.xml
/usr/lib/mono/xbuild-frameworks/.NETFramework
/usr/lib/python2.7/dist-packages/PyQt5/uic/widget-plugins/.noinit
/usr/lib/python2.7/dist-packages/PyQt4/uic/widget-plugins/.noinit
/usr/lib/mono/xbuild-frameworks/.NETPortable
/usr/lib/mono/xbuild-frameworks/.NETFramework
I guess that's a separate question? Or is this no issue at all? I don't know how to check if these files/directories are ok and needed.
**Edit**: Note I once also got warnings for "Checking for passwd file changes" and "Checking for group file changes" even though I didn't change any such afaik. An earlier and later scan showed no warnings - these just showed once. Any ideas?
Asked by mYnDstrEAm
(4708 rep)
Jun 27, 2017, 05:18 PM
Last activity: Nov 4, 2024, 08:29 PM
Last activity: Nov 4, 2024, 08:29 PM