On Thu, 28 Jan 2021 at 06:44, François Patte <
francois.patte(a)mi.parisdescartes.fr> wrote:
Bonjour,
Since the last update of f32, rkhunter send a lot of warning (in spite
of the --propupd I run after each update...):
Warning: Checking for possible rootkit files and directories [ Warning ]
Found file '/lib/libkeyutils.so.1.9'. Possible rootkit:
Sniffer component
Found file '/lib64/libkeyutils.so.1.9'. Possible rootkit:
[...]
There is a recent thread in this forum on similar reports.
The issue affects other distros:
FS#63369 : [keyutils] RKhunter reports a possible rootkit (
archlinux.org)
<
https://bugs.archlinux.org/task/63369>
--
George N. White III