On Sun, 27 Apr 2008 12:37:15 +0200, Francesco Talamona wrote:

> > > It's because there's a /dev/dev folder
> >
> > Have you run rkhunter --update? I used to see this warning, but it
> > disappeared a while ago with a database update.

I've just checked back and in my case it was /dev/md/n, which are links
to /dev/mdn. I have no /dev/dev.

> Actually I didn't think about an update, I updated right now and
> rechecked, but nothing has changed.
>
> Why do I have duplicated md devices?

It sounds like a udev rule may be causing this, possibly an incorrectly
written one, because the /dev part of node names is implicit in udev, so
if you set a name or symlink to dev/foo, you'll get /dev/dev/foo.


--
Neil Bothwick

Anyone able to feel pain is trainable.