>> So what is the fix? Sorry if this is a silly question and I'm aware I >> may be going away from RKH support but do I need to somehow "re-sync" >> the RPM package manager? Or can I whitelist this in RKH? > > This is not something that RKH can sort out. By using the package > manager you are telling RKH just to check the package manager to see if > a file has changed. In this case /sbin/ifup has changed. You can't > whitelist these because it is the package manager telling RKH that the > file has changed - not RKH checking its own values to see if the file > has changed.
Fair enough, thank you for the quick responses. I have changed PKGMGR to NONE and RKH is working great. I'm not worried about /sbin/ifup as it's some manual changes that we did to the file for some control panel software. Thanks again for a great tool :-) Dan ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
