Package: rkhunter
Version: 1.3.2-1
Severity: normal

Hi,

I've build all neccessary modules into the kernel. Therefore, my
/proc/modules is empty. rkhunter complains

Warning: No output found from the lsmod command or the /proc/modules file:
         /proc/modules output:
         lsmod output:

I don't found a way to tell him, this is alright. And missing modules
support is also not an error. It's a security feature to don't allow
loading of code into the kernel at runtime.

Two ideas:
* Use /boot/config-$(uname -r) to verify module support is enabled.

* grep in /proc/kallsyms for modules

% diff <(grep -o '\[.*\]$' /proc/kallsyms |sort -u | tr -d '[]') \
  <(lsmod |sed '1d;s/ .*//' |sort) 

Bye, Jörg.

-- System Information:
Debian Release: unstable/experimental
  APT prefers unstable
  APT policy: (900, 'unstable'), (700, 'experimental')
Architecture: powerpc (ppc)

Kernel: Linux 2.6.25-rc6
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages rkhunter depends on:
ii  binutils            2.18.1~cvs20080103-1 The GNU assembler, linker and bina
ii  debconf [debconf-2. 1.5.20               Debian configuration management sy
ii  exim4               4.69-2               meta-package to ease Exim MTA (v4)
ii  exim4-daemon-light  4.69-2               lightweight Exim MTA (v4) daemon
ii  file                4.23-2               Determines file type using "magic"
ii  net-tools           1.60-19              The NET-3 networking toolkit
ii  perl                5.8.8-12             Larry Wall's Practical Extraction 

Versions of packages rkhunter recommends:
ii  curl                 7.18.0-1            Get a file from an HTTP, HTTPS or 
ii  elinks               0.11.3-5            Advanced text-mode WWW browser
ii  iproute              20080108-1          Professional tools to control the 
pn  libmd5-perl          <none>              (no description available)
ii  lynx                 2.8.6-2             Text-mode WWW Browser
ii  unhide               20071102-2          Forensic tool to find hidden proce
ii  wget                 1.10.2+1.11.beta1-1 retrieves files from the web

-- debconf information excluded

Attachment: signature.asc
Description: Digital signature http://en.wikipedia.org/wiki/OpenPGP

Reply via email to