rkhunter reports pulseaudio file as suspicious

Bug #330453 reported by Roger Binns on 2009-02-17
This bug affects 2 people
Affects Status Importance Assigned to Milestone
rkhunter (Debian)
Fix Released
rkhunter (Ubuntu)

Bug Description

Binary package hint: rkhunter

(Up to date Intrepid) If you have rkhunter installed and a user logged in graphically then their pulseaudio file is reported as suspicious:

  Warning: Suspicious file types found in /dev:
           /dev/shm/pulse-shm-1167401066: data

Since pulseaudio is the default audio system, the rkhunter config files should by default not complain about its session files.

Ivan Kharlamov (the-paper-men) wrote :

I've got the same problem in up-to date Jaunty:

/var/log/rkhunter.log says the following:

[18:37:16] Checking /dev for suspicious file types [ Warning ]
[18:37:16] Warning: Suspicious file types found in /dev:
[18:37:16] /dev/shm/pulse-shm-341458427: data
[18:37:16] /dev/shm/pulse-shm-791923353: data
[18:37:16] /dev/shm/pulse-shm-512277733: data

Changed in rkhunter (Debian):
status: Unknown → New
Changed in rkhunter (Debian):
status: New → Fix Released
NoOp (glgxg) wrote :

Still occuring with lucid:

$ apt-cache policy rkhunter
  Installed: 1.3.6-3ubuntu1
  Candidate: 1.3.6-3ubuntu1
  Version table:
 *** 1.3.6-3ubuntu1 0
        500 http://us.archive.ubuntu.com/ubuntu/ lucid/universe Packages
        100 /var/lib/dpkg/status

[06:43:32] Warning: Suspicious file types found in /dev:
[06:43:32] /dev/shm/pulse-shm-2045302650: data
[06:43:32] /dev/shm/pulse-shm-1919254499: data
[06:43:32] /dev/shm/pulse-shm-4164215534: data
[06:43:32] /dev/shm/pulse-shm-2697768927: data

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.