Hi guys,
since I upgraded a system here (mailserver Kopano) to Buster, I get a daily mail with this content.
Warning: The following suspicious (large) shared memory segments have been found:
Attached segment with no pathname: Owner: www-data Segment ID: 0 Attached processes: 10 Creator PID: 2013 Last PID: 2912 Size: 2013 (configured size allowed: 2912)
But the listed pid are not exist.
Normally, such messages will display a path, which you can then whitelist, e.g.
ALLOWIPCPROC=/usr/sbin/apache2
Except that it isn’t. How can I find out what Rkhunter wants from me?
Very Thanks