On Tue, 2008-12-02 at 01:00 -0500, Mark Misulich wrote:

>  It went away with about 20 or so other warnings when I did the propupdate.
>
Hi,

Can you type in 'sudo rkhunter --version' so that we know which version
of rkhunter you are using please.

I noticed that you said you are using Ubuntu, so the previous posting
about using the RPM package manager is not quite correct. RedHat (and
other) Linux distros use the RPM package manager, but Ubuntu is based on
Debian using dpkg, get-apt, aptitude and the like to handle packages.

Whenever rkhunter is run it will (automatically unless configured
otherwise) create the /var/log/rkhunter.log file. Prior to this it
renames the old log file to 'rkhunter.log.old'. So you have access to
the current log file and the previous one. Any log files before that
though are lost (again unless the sysadmin has configured things
differently - there is an 'append' option for the log file so previous
runs of rkhunter could be kept, but all in one log file).

I admit it is something I have wondered about, perhaps we should set
aside log files that have warnings? And then let the user/sysadmin
remove them.




John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 587287
E-mail: [EMAIL PROTECTED]       Fax: +44 (0)1752 587001

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to