Hi Mark, lets take a look on prelink. But first to the following 1. rkhunter --propupd 2. rkhunter --cronjob 3. look in the /var/log/rkhunter.log (now I hope it is clean="all is ok" for the test) 4. /etc/cron.daily/prelink 5. rkhunter -c now you see manny changes on the inodes and/or filesize. 6. now you have 3 possiblities. a. rpm -e prelink (I dont now who really need this, because the applications dont startup faster, so it is the best to uninstall this) b. every day rkhunter --propupd, but this is not really usefull ;-) c. uninstall rkhunter - hmmm, not good
Unfortunaly I dont have any other solution. Sincerely JM >> ALLOWDEVFILE=/dev/shm/sysconfig/ifup-lo >> ALLOWDEVFILE=/dev/shm/sysconfig/if-lo >> ALLOWDEVFILE=/dev/shm/sysconfig/network > > [etc.] > > That doesn't explain why you need to do so. ------------------------------------------------------------------------------ SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada. The future of the web can't happen without you. Join us at MIX09 to help pave the way to the Next Web now. Learn more and register at http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users