Arch Linux

Ranjith513

Member

Registered: 2025-05-27

Posts: 1

rkhunter warning in systemd-networkd?

sudo cat /var/log/rkhunter.log | grep -i warning
[06:57:21]   Checking for packet capturing applications      [ Warning ]
[06:57:21] Warning: Process '/usr/lib/systemd/systemd-networkd' (PID 620) is listening on the network.

The above warning was reported after running sudo rkhunter --checkall. Is this warning a false positive, and can systemd-networkd be safely whitelisted in rkhunter?

loqs

Member

Registered: 2014-03-06

Posts: 18,872

Re: rkhunter warning in systemd-networkd?

What has your own research determined about /usr/lib/systemd/systemd-networkd in respect to if it is expected to be accessing the network?