On Thu, 06 Dec 2007 21:42:53 +0000, John Horne wrote about Re: [Rkhunter-users] baffling warning:
>Hmm, this doesn't make much sense. The warnings are caused by the RPM >package manager saying that the files are NOT correct. Yes, but the rpmdb changes when packages are upgraded. So rkh needs a new baseline to check, which --propupd takes care of. At least that's how I understand it. > Can you run 'rpm >-Vf /usr/bin/who' and let me know what the output is (if any) please. Of course: # rpm -Vf /usr/bin/who S.5....T c /etc/DIR_COLORS S.5....T c /etc/pam.d/su .M....G. /usr/bin/who Looks okay to me. But I'll appreciate any ideas. Thank and BFN =Dick Gevers= ------------------------------------------------------------------------- SF.Net email is sponsored by: Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users