I just ran rkhunter --check
and all was good except this:
Checking if SSH root access is allowed [ Warning]
You can also have this error during a daily run :
Warning: The SSH and rkhunter configuration options should be the same:
SSH configuration option 'PermitRootLogin': no
Rkhunter configuration option 'ALLOW_SSH_ROOT_USER': unset
What does this warning mean? SSH root access is not allowed on this system.
Solution :
Here is how my /etc/ssh/sshd_config
is set:
PermitRootLogin no
and rkhunter.conf
root ~ # cat /etc/rkhunter.conf | grep ALLOW_SSH_ROOT_USER
#ALLOW_SSH_ROOT_USER=no
ALLOW_SSH_ROOT_USER=unset