Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

Rkhunter reported me that it found hidden files in /etc:

Warning: Hidden file found: /etc/.group.48239632746: ASCII text
Warning: Hidden file found: /etc/.passwd.13046384800: ASCII text
Warning: Hidden file found: /etc/.passwd.14350544901: ASCII text
Warning: Hidden file found: /etc/.passwd.16941124733: ASCII text
Warning: Hidden file found: /etc/.passwd.22154181091: ASCII text
Warning: Hidden file found: /etc/.passwd.48239632746: ASCII text

Should I be worried about it?

It seems those files are copies of the original passwd file....

Regards

share|improve this question
1  
Please check that they are really copies, and if they differ from the original passwd file, post how they differ. Also: can you post the output of ls -l /etc/.passwd.*? –  arrange Oct 25 '11 at 22:25
    
ls -l /etc/.passwd.* -rw-r--r-- 1 root root 7415 2011-05-05 22:29 /etc/.passwd.13046384800 -rw-r--r-- 1 root root 7341 2011-04-26 10:24 /etc/.passwd.14350544901 -rw-r--r-- 1 root root 7297 2011-04-18 17:51 /etc/.passwd.16941124733 -rw-r--r-- 1 root root 7297 2011-04-19 08:50 /etc/.passwd.22154181091 -rw-r--r-- 1 root root 7387 2011-04-19 15:25 /etc/.passwd.48239632746 –  Laurent Nov 21 '11 at 21:56

2 Answers 2

up vote 2 down vote accepted

Question answered by OP in comments

It seems to be the GUI I use. Nothing harmful.

share|improve this answer

What do you use to create users? If you use GUI tools they might be creating a backup. You should also take a look at output of:

ls -l /etc/.shadow*
share|improve this answer
    
No .shadow files at all. It seems to be the GUI I use. Nothing harmful. –  Laurent Dec 11 '11 at 8:00
    
Under normal circumstances there should be an /etc/shadow file. Strange that the GUI doesn't back it up. –  Karlson Dec 12 '11 at 14:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.