Results 1 to 4 of 4
  1. #1
    Join Date
    Aug 2004
    Location
    AU
    Posts
    690

    chkrootkit - file size is zero warning

    Hello,

    I received the daily chkrootkit, I found I have 1 warning anomalies shell .bash_history and could not find it in search to find out.

    Searching for anomalies in shell history files... Warning:
    `//home/userx/.bash_history
    //home/userxx/.bash_history
    //home/userxxx/.bash_history
    //home/userxxxx/.bash_history' file size is zero

    Is that a serious issue or remove .bash_history? I don't know what that means. Those accounts were transfered from another provider yesterday then received chkrootkit today.

    Thanks

  2. #2
    Join Date
    Aug 2001
    Posts
    5,066
    .bash_history keeps the user's command line history of the bash. An empty file might indicate that the file was altered trying to hide commands run by an intruder. In your case I dont think this is something to worry, especially as you mentioned a user transfer.
    Sitemeer.com - Is your site up?
    Multi-Location Service Availability Check ● yes, we do HTTPS & IDN!


  3. #3
    Join Date
    Dec 2005
    Location
    Internet
    Posts
    1,337
    Not at all a serious issue

    The message means that the .bash_history is empty, the user must run shell commands to have its history in .bash_history.
    Senior Server Administrator

  4. #4
    Join Date
    Aug 2004
    Location
    AU
    Posts
    690
    Ah, I wasn't sure if that is a serious issue so I came here to ask Thanks for explaining what .bash_history is!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •