package rkhunter
tags 559696 + wontfix
thanks

Hi Holger,

Le vendredi 15 janvier 2010 à 14:24 +0100, Holger Levsen a écrit :
> Hi
> 
> wouldn't it be better to ship rkunter.conf with this line
> RTKT_FILE_WHITELIST="/etc/init.d/.depend.boot /etc/init.d/checkroot.sh 
> /etc/init.d/bootlogd /etc/init.d/hdparm" 
> instead of just mentioning this in the README.Debian?
> 
> Granted, hdparm is priority optional but it has a very high popcon score and 
> having to fix these warnings at almost every installation is quite annoying:
[...]

I am very reluctant to whitelist any file by default: what would happen
if one of these files is really infected?
I think it is up to the system administrator to whitelist what he
considers safe after checking the files individually.

Cheers,
Julien




--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to