On Thu, 2008-01-03 at 03:01 -0500, Steve West wrote: > Hi, > > I just updated our RH from 1.2.9 to 1.3.0 and now I keep getting the > following error when running the 'update' or the 'check' options: >
> Installing rkhunter.conf in no-clobber mode: OK. > >>> > >>> PLEASE NOTE: inspect for update changes in > /usr/local/etc/rkhunter.conf.30700 > >>> and apply to /usr/local/etc/rkhunter.conf before running Rootkit > Hunter. > >>> > I suspect you need to do this bit. It seems that your 1.3.0 version is looking at an unmodified 1.2.9 rkhunter.conf file. You need to modify the file to correspond with your installation. It is, however, far easier to remove the file completely, and re-install 1.3.0. You then start off with a clean rkhunter.conf file. Personally I tend to run 'rkhunter --propupd' and then 'rkhunter -c -sk'. Then modify the config file to cater for any whitelisting thrown up by the check. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
