On Tue, 24 Feb 2009 12:28:17 +0000
Frank Murphy <frankly3d(a)gmail.com> wrote:
RkHunter gives the following
Warning: Hidden file found: /usr/bin/.ssh-keyscan.hmac: ASCII text
[09:16:37] Warning: Hidden file found: /usr/bin/.ssh-agent.hmac:
ASCII text [09:16:37] Warning: Hidden file found: /usr/bin/.ssh.hmac:
ASCII text [09:16:37] Warning: Hidden file
found: /usr/bin/.ssh-add.hmac: ASCII text [09:16:37] Warning: Hidden
file found: /usr/bin/.ssh-keygen.hmac: ASCII text [09:16:37] Warning:
Hidden file found: /usr/sbin/.sshd.hmac: ASCII text
Yum what provides */above(files) only gives the following
Filename : /usr/bin/.ssh-keyscan.hmac
openssh-clients-5.1p1-7.fc11.i386 : An open source SSH client
applications Repo : installed
Matched from:
Filename : /usr/bin/.ssh-keyscan.hmac
Wanted adivce before I ask on RKH list.
Yes, these are 'legit'. I need to update rkhunter to not flag them.
It's part of the 'FIPS-150' standard.
Personally I think these sig files are messy being in the dir that the
executables are in, but the standard apparently requires that. ;(
Frank
kevin