rkhunter notified me about this weird symlink in /dev lrwxrwxrwx. 1 root root 10 Dec 18 13:55 /dev/dev/resume -> ../../sda2 I'm not sure what creates it, as its unowned, so I'm starting with dracut.
well spotted, thanks! http://git.kernel.org/cgit/boot/dracut/dracut.git/commit/?id=bb1ba3a1ca9dd6284f6319eb197de4a757a7f99d
*** Bug 1047068 has been marked as a duplicate of this bug. ***
got same error after apply patch to /modules.d/95resume/parse-resume.sh, rebooted: [gartim@genepi2 ~]$ ls -la /dev/dev/resume lrwxrwxrwx 1 root root 10 Jan 19 17:32 /dev/dev/resume -> ../../vda3 no ../../vda3 exist, rkhunter is giving me a false position (me hope) the GasKit Rootkit warning.
Agreed. Applying the git patch made no difference at all. The broken link is still there.
(In reply to John Horne from comment #4) > Agreed. Applying the git patch made no difference at all. The broken link is > still there. did you run: # dracut -f afterwards?
No... but I have now, and the link (and /dev/dev directory) have gone. Thanks for that.
yep!! worked perfectly after dracut -f systemctl reboot thanks much!
Looking for rkhunter bug and /dev/dev/resume I find this entry. At this time, new dracut rpm dracut-034-80.git20140122.fc20 is available on koji but it seens this package has not be pushed on testing or update...
I updated to dracut-034-80.git20140122.fc20.x86_64 from koji I also updated dracut-config-rescue and dracut-network for constitency. Then I run dracut -f and rebooted. This fixed rkhunter problem.
dracut-037-10.git20140402.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/dracut-037-10.git20140402.fc20
Package dracut-037-10.git20140402.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing dracut-037-10.git20140402.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-4704/dracut-037-10.git20140402.fc20 then log in and leave karma (feedback).
dracut-037-10.git20140402.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.