2 Questions!!

[cousinlucky]

Rkhunter issued warnings about hidden directory files in etc and dev; how do I find them please?

Has anyone heard of the " classpath security " file?

Thanks!

[Lazydog]

ls -a

This is 10 chars.

[jayd512]

Not entirely sure of the function, but a quick web search shows me that the classpath security is nothing malicious.
It seems like a subset of security rules and/or definitions.

BTW, RKHunter always gives me an error or complaint hidden directories. So after listing them out, take a look through your output.
If anything seems wrong to you, let us know.

[cousinlucky]

Thanks!! Is there a way to " unhide " these files so that I can move or delete them?

[yancek]

Not sure what you mean by "unhide these files" as the command above will show them and you can then move or delete them in a terminal as long as you are certain that won't damage your system. You can usually see them in a file manager by clicking the View tab, there should be an option to show hidden files.

[jayd512]

In a terminal, ls -a will do it.
In most file managers, just hit Ctrl + h to show them.

[elija]

Be wary of removing them though. rkhunter is known for giving false positives. link

There is a classpath.security file installed with the package libgcj-common which seems to be part of a Java environment. link

[jayd512]

Be wary of removing them though. rkhunter is known for giving false positives. link

There is a classpath.security file installed with the package libgcj-common which seems to be part of a Java environment. link

Right... that's a good link of what I was looking for earlier.
classpath.security is fine, lucky. Noneed to remove it. Or worry about it.

[cousinlucky]

I found the hidden directory /dev/.udev chock full of locked files and I found /dev.static to seem like copies of the whole dev folder.

If I press tab on a hidden file another terminal window opens but I have no idea what to do next to look at or to move the file- can you help me out here, gentlemen?

[elija]

They are both false positives. You can configure rkhunter to ignore them. Slightly misquoting the first link above...

Press Alt + F2 and enter gksu gedit /etc/rkhunter.conf
Enter your password when asked

and remove the # in front of the following lines:

ALLOWHIDDENDIR=/dev/.udev
ALLOWHIDDENDIR=/dev/.static
ALLOWHIDDENDIR=/dev/.initramfs