Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail From: Jeff Higgins Newsgroups: comp.lang.java.programmer Subject: Re: Unexplained files - why? Date: Tue, 11 Oct 2011 11:41:40 -0400 Organization: A noiseless patient Spider Lines: 24 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Injection-Date: Tue, 11 Oct 2011 15:40:25 +0000 (UTC) Injection-Info: mx04.eternal-september.org; posting-host="Z+UYWCPnTu4kxHsUACWmFQ"; logging-data="10488"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX186LZAwRwK7rxB6U9YrNkPCXZPr0y0rUpo=" User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16) Gecko/20111004 Icedove/3.0.11 In-Reply-To: Cancel-Lock: sha1:KiGI4UkqhDYejMSrJchnrSYuVHY= Xref: x330-a1.tempe.blueboxinc.net comp.lang.java.programmer:8708 On 10/11/2011 10:28 AM, Jeff Higgins wrote: > On 10/04/2011 08:29 PM, Martin Gregorie wrote: >> I've just run rkhunter on one of my Linux boxes. It found an unexpected >> pair of files: >> >> /etc/.java/.systemPrefs/.system.lock >> /etc/.java/.systemPrefs/.systemRootModFile >> >> Both are empty and are timestamped "May 4 11:58" and so are probably >> connected to an SDK update since I found an archived copy of jdk-6u26- >> linux-i586.rpm with a timestamp of "May 4 11:59" on the same machine. >> What is odd is that I installed the same JDK on another machine at the >> same time and it doesn't have these odd files or the /etc/.java directory >> in its filing system. >> >> So, have any of you seen these files or know why they were created? >> >> > Just now and no. Debian squeeze with several Java versions all from the > Debian repositories as far as I know. a web search term systemRootModFile seems to indicate the files are part of a normal install on some os. This link reenforces that impression.