On Sun, 2007-12-30 at 14:44 +0100, Nils Breunese (Lemonbit) wrote: > Dogsbody wrote: > > >> It's a known problem caused by prelinking > >> (https://bugzilla.redhat.com/show_bug.cgi?id=240658). The > >> rkhunter.dat > >> file will have entries for these commands, but as the message says no > >> *hash* entry. If you run something like 'prelink /usr/bin/less' you > >> will > >> get an error. This is what RKH sees. > > > > Ahh, OK, thank you. Is there any way to exclude these binaries that > > give > > errors? I had a look through the /etc/rkhunter.conf file but > > couldn't find > > anything, perhaps remove the lines from rkhunter.dat? > > > >> The FAQ file also mentions about the 'missing hashes' error. > > > > Was I looking in the wrong place then? I went to the Rootkit Hunter > > homepage > > [1] and clicked through to the FAQ [2] but couldn't even find the > > word "missing". > > Als the FAQ recommends running hashupd.sh, while the RKH homepage > mentions the --propupd option replaces the hashupd.sh script. > I suspect the online FAQ is out of date. You need to look at the FAQ supplied with the RKH tarball (or however it was installed on your systems).
John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
