The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

rkhunter question - differences in user accounts?

Discussion in 'General Discussion' started by jols, Jan 31, 2006.

  1. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    Any idea what this means? Should I remove these four vsite hosted accounts from the server?

    -----------------------------------

    Checking for differences in user accounts... Found differences
    Info:
    ----------------------
    < oki9ramm:x:32291:32291::/home/oki9ramm:/usr/local/cpanel/bin/noshell
    < z3terra:x:32292:32292::/home/z3terra:/usr/local/cpanel/bin/noshell
    < dcjames:x:32293:32293::/home/dcjames:/usr/local/cpanel/bin/noshell
    < robertvm:x:32294:32294::/home/robertvm:/usr/local/cpanel/bin/noshell
    ----------------------
    Info: Some items have been added (items marked with '<')
    Checking for differences in user groups... Found differences
    Info:
    ----------------------
    < oki9ramm:x:32291:
    < z3terra:x:32292:
    < dcjames:x:32293:
    < robertvm:x:32294:
    ----------------------
     
  2. simplestar

    simplestar Well-Known Member

    Joined:
    Nov 15, 2005
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    6
    Login via SSH and run a full scan of RkHunter and see what the results are.

    ----command------
    rkhunter -c
     
  3. jols

    jols Well-Known Member

    Joined:
    Mar 13, 2004
    Messages:
    1,111
    Likes Received:
    2
    Trophy Points:
    38
    Yup, that's what I did.
    I just pulled out and posted the results that were puzzeling to me.
     
  4. simplestar

    simplestar Well-Known Member

    Joined:
    Nov 15, 2005
    Messages:
    97
    Likes Received:
    0
    Trophy Points:
    6
    Nothing else was found? that's good. Did you do any admin changes? It does state 'no shell'.
    for myself anyway, when I make a change to an account such as password, RKHunter's next run will pull up a difference.
     
Loading...

Share This Page