>>>>>> It's a known problem caused by prelinking >>>>>> (https://bugzilla.redhat.com/show_bug.cgi?id=240658). The rkhunter.dat >>>>>> file will have entries for these commands, but as the message says no >>>>>> *hash* entry. If you run something like 'prelink /usr/bin/less' you >>>>>> will get an error. This is what RKH sees. >>>>> >>>>> Ahh, OK, thank you. Is there any way to exclude these binaries that >>>>> give errors? I had a look through the /etc/rkhunter.conf file but >>>>> couldn't find anything, perhaps remove the lines from rkhunter.dat? >>>> >>>> The FAQ file also mentions about the 'missing hashes' error. >>> >>> Was I looking in the wrong place then? I went to the Rootkit Hunter >>> homepage and clicked through to the FAQ but couldn't even find the >>> word "missing". >> >> Als the FAQ recommends running hashupd.sh, while the RKH homepage >> mentions the --propupd option replaces the hashupd.sh script. >> > I suspect the online FAQ is out of date. You need to look at the FAQ > supplied with the RKH tarball (or however it was installed on your > systems).
Hi, With the release of 1.3.2 is it possible to whitelist these files or do I have to hack /usr/local/bin/rkhunter again to delete the entries to these three files? Great work on 1.3.2 though, thank you so much for all your hard work. Dan ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
