1

Rkhunter reported me that it found hidden files in /etc:

Warning: Hidden file found: /etc/.group.48239632746: ASCII text
Warning: Hidden file found: /etc/.passwd.13046384800: ASCII text
Warning: Hidden file found: /etc/.passwd.14350544901: ASCII text
Warning: Hidden file found: /etc/.passwd.16941124733: ASCII text
Warning: Hidden file found: /etc/.passwd.22154181091: ASCII text
Warning: Hidden file found: /etc/.passwd.48239632746: ASCII text

Should I be worried about it?

It seems those files are copies of the original passwd file....

Regards

Improve this question
2
  • 1
    Please check that they are really copies, and if they differ from the original passwd file, post how they differ. Also: can you post the output of ls -l /etc/.passwd.*?
    – arrange
    Oct 25, 2011 at 22:25
  • ls -l /etc/.passwd.* -rw-r--r-- 1 root root 7415 2011-05-05 22:29 /etc/.passwd.13046384800 -rw-r--r-- 1 root root 7341 2011-04-26 10:24 /etc/.passwd.14350544901 -rw-r--r-- 1 root root 7297 2011-04-18 17:51 /etc/.passwd.16941124733 -rw-r--r-- 1 root root 7297 2011-04-19 08:50 /etc/.passwd.22154181091 -rw-r--r-- 1 root root 7387 2011-04-19 15:25 /etc/.passwd.48239632746
    – Laurent
    Nov 21, 2011 at 21:56

2 Answers 2

Reset to default
3

Question answered by OP in comments

It seems to be the GUI I use. Nothing harmful.

Improve this answer
0

What do you use to create users? If you use GUI tools they might be creating a backup. You should also take a look at output of:

ls -l /etc/.shadow*
Improve this answer
2
  • No .shadow files at all. It seems to be the GUI I use. Nothing harmful.
    – Laurent
    Dec 11, 2011 at 8:00
  • Under normal circumstances there should be an /etc/shadow file. Strange that the GUI doesn't back it up.
    – Karlson
    Dec 12, 2011 at 14:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .