Modifier configuration de Chkrootkit
Bonjour,
J'ai installé chkrootkit sur un serveur web qui héberge notamment des portails Wordpress.
Le log de Chkrootkit me signale une floppée de Perl à la rubrique "Searching for suspicious files and dirs" :
Citation:
/usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/LWP/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Config/Crontab/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Crypt/SSLeay/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Crypt/SmbHash/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/SAX/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/LibXML/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/LibXML/Common/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/Parser/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/XPath/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/NamespaceSupport/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/Simple/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/XML/Writer/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/DBD/SQLite/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/HTML/Tagset/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/HTML/Parser/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/DBI/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Net/Daemon/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Net/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/RPC/XML/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/RPC/PlServer/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Bootloader/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/URI/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Digest/MD4/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Digest/SHA1/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Digest/HMAC/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/X500/DN/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/ycp/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Term/ReadLine/Gnu/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Term/ReadKey/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/TimeDate/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Parse/RecDescent/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/File/Tail/.packlist /usr/lib/perl5/vendor_perl/5.10.0/x86_64-linux-thread-multi/auto/Locale/gettext/.packlist /usr/lib/perl5/5.10.0/x86_64-linux-thread-multi/.packlist
Je ne pense pas qu'il s'agisse d'éléments dangereux. Qu'en pensez-vous ?
Comment faire pour configurer Chkrootkit afin qu'il ne considère plus ces éléments comme potentiellement dangereux ?
