On Tue, 2007-05-22 at 23:10 +0200, freak wrote:
>
> some warnings now, and seems it knows the good hashes now. but the
> warnings are not nice, should i be scared now?
>
No, not necessarily. Look in the log file, it says:
====================================================================
[23:11:06] Warning: Checking for prerequisites [ Warning ]
[23:11:06] The file of stored file properties (rkhunter.dat)
does not exist, and so must be created. To do this
type in 'rkhunter --propupd'.
[23:11:06]
[23:11:06] Warning: WARNING! It is the users responsibility to ensure
that when the '--propupd' option is used, all the files on
their system are known to be genuine, and installed from a
reliable source. The rkhunter '--check' option will compare
the current file properties against previously stored values,
and report if any values differ. However, rkhunter cannot
determine what has caused the change, that is for the user to
do.
====================================================================
So, run 'rkhunter --propupd' if you are happy with your system. Then
re-run 'rkhunter --check'. Most of the warnings refer to things that can
be whitelisted - look in the RKH configuration file (rkhunter.conf).
One warning refers to the rc.sysinit file - I'm not sure that that is
right. I'll look in to it.
John.
--
---------------------------------------------------------------
John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
