On Fri, 2007-12-07 at 09:22 +1100, Dave wrote: > John Horne wrote: > > On Thu, 2007-12-06 at 23:50 +0800, Uwe Dippel wrote: > >> Please, please bring back a default mail pointing to the reason for > >> the warning ! > >> > > I'm a bit lost with this. What was the default mail that you used to > > receive before? Have you used the '--report-warnings-only' option? That > > will tell you why warnings have been given. > > I've just setup rkhunter 1.3.0 from source on a new box (CentOS 5.1) and > have run into the same issue; the warning e-mail is not very > informative. Running rkhunter with MAIL-ON-WARNING set in the config > file and the options "--update --cronjob --rwo -q" results in the > warnings being printed to the console and me receiving an e-mail stating > only "Please inspect this machine, because it may be infected." > > Running with "--update --cronjob --rwo" gives the same results, and > running with "--update --cronjob -q" results in no warnings on the > console but the same email. > > I'm guessing that --rwo overrides -q. > > Are there any options that will send the warnings in the e-mail? Or if I > want to do this should I just turn off the mail-on-warning functionality > and redirect the output to mail myself? > Turn off MAIL-ON-WARNING and use the '--rwo' option in your crontab. Cron will then email you any warnings.
The MAIL-ON-WARNING option is not an "email the warnings to me" option, it is simply used to email you a notice that there *were* warnings. It is then for you to look in the logfile at the warnings. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
