Hi Helmut, > /var/lib/rkhunter/db/rkhunter.dat > There you should find an entry for "less" (among many other entrys). It > should be a new file (produced by "rkhunter --propupd").
Yes, as Larry says, this file seems to get updated except for the hashes for these three files, it's all very strange. # grep /less /var/lib/rkhunter/db/rkhunter.dat File:/usr/bin/less::594466:0755:0:0:101788:1158143116: > What tells > which -a less > locate bin/less | grep less$ # which -a less /usr/bin/less # locate bin/less | grep less$ /usr/bin/less Dan ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
