On Sat, 2008-03-29 at 18:14 +0000, Dick Gevers wrote: > Hello, > > In my rkhunter.conf I have a line reading: > > ALLOWPROCDELFILE=/home/dvg/.boinc/BOINC/projects/setiathome.berkeley.edu/setiathome-5.27.i686-pc-linux-gnu > > The other entries of the same name give the result: > Info: Found process '/bla/foo/bar': it is whitelisted. > > But this entry is ignored: > Warning: The following processes are using deleted files: > Process: setiathom PID: 15935 > File: /home/dvg/.boinc/BOINC/slots/1/stderr.txt > > Maybe the line ALLOWPROCDELFILE is too long for rkhunter? > RKH does not impose any limit of its own since the shell will do this for us.
As with unSpawn I can see no problem with this. I have done some testing and cannot see where the problem may be. Can you run 'rkhunter --debug --enable deleted_files' please, and then email to unSpawn and myself the /tmp/rkhunter-debug file. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839 ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
