From owner-freebsd-questions@FreeBSD.ORG  Sat Feb  2 13:43:04 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D72D016A41A
	for <freebsd-questions@freebsd.org>;
	Sat,  2 Feb 2008 13:43:04 +0000 (UTC)
	(envelope-from fbsd.questions@rachie.is-a-geek.net)
Received: from snoogles.rachie.is-a-geek.net (rachie.is-a-geek.net
	[66.230.99.27])
	by mx1.freebsd.org (Postfix) with ESMTP id A689413C4E9
	for <freebsd-questions@freebsd.org>;
	Sat,  2 Feb 2008 13:43:04 +0000 (UTC)
	(envelope-from fbsd.questions@rachie.is-a-geek.net)
Received: from localhost (localhost [127.0.0.1])
	by snoogles.rachie.is-a-geek.net (Postfix) with ESMTP id 44CBF1CC8B;
	Sat,  2 Feb 2008 04:43:03 -0900 (AKST)
From: Mel <fbsd.questions@rachie.is-a-geek.net>
To: freebsd-questions@freebsd.org
Date: Sat, 2 Feb 2008 14:34:07 +0100
User-Agent: KMail/1.9.7
References: <aec9371b0802020508s20fddcc3jfd08bf5b156feb55@mail.gmail.com>
In-Reply-To: <aec9371b0802020508s20fddcc3jfd08bf5b156feb55@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200802021434.08715.fbsd.questions@rachie.is-a-geek.net>
Cc: Colin Brace <cb@lim.nl>
Subject: Re: rkhunter: "find: /dev/fd/3/* No such file or directory" error
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 02 Feb 2008 13:43:04 -0000

On Saturday 02 February 2008 14:08:52 Colin Brace wrote:
> Hi all,
>
> Lately I have been seeing a lot of errors generated when I run
> rkhunter on a daily basis by cron:
>
> find: /dev/fd/3/sendmail.st: No such file or directory
> find: /dev/fd/3/userlog: No such file or directory
> find: /dev/fd/3/lastlog: No such file or directory
> [...]
>
> I am afraid I don't know quite enough about the BSD filesystem to know
> what dev/fd/3 is.

/dev/fd/0-2 = stdin/out/err, 3 is an open file somewhere on your system. 
Logically, the first file opened by the first process after boot up, but of 
course, this isn't always the case.

Looks more like a bug in rkhunter. For some reason it thinks fd 3 is /var/log.

-- 
Mel