Having been on 1.3.0 for a few weeks now, I more and more consider the mail informing me of a possible breach by telling me "Please inspect this machine, because it may be infected." very silly. Though it might be good, to avoid mails (like before) at each run, I now tend to prefer daily mails. Why ? I get such a warning almost daily in these days. Meaning, I have to log on, cd, blabla, less, '/', and so forth. While, in real life, I have only added a user (Having a few hundred users, that's daily practice). Today I got one, for a warning at the automatic update, which didn't work this time around. This is simply silly ! - not to send me a mail, but not stating what the supposed problem was ! No, I don't want to exclude these items from the checking process, but having to dig through all the crap as mentioned above, will simply lead to me *not* doing it daily. Much better, to indicate what was considered a problem, like 'changing of /etc/passwd' (obvious after adding a user, but relevant if I didn't add one), or a failed update (no problem, if happening once).
Please, please bring back a default mail pointing to the reason for the warning ! Thanks, Uwe ------------------------------------------------------------------------- SF.Net email is sponsored by: The Future of Linux Business White Paper from Novell. From the desktop to the data center, Linux is going mainstream. Let it simplify your IT future. http://altfarm.mediaplex.com/ad/ck/8857-50307-18918-4 _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users