On Wed, 2008-12-31 at 02:34 +0100, Jim Knuth wrote: > > The new version brings 6 warnings, a la: > > ../which ... has been replaced by a script > > with sudo rkhunter --propupd, no changing, the same. > > What can I do? Thanx in advance. > You can whitelist known script commands in your /etc/rkhunter.conf file with the SCRIPTWHITELIST option.
However, first check that the file should be a script, perhaps by using a package manager to verify the package the script belongs to. Secondly, if the previous version of RKH did not report these files as scripts then I am a bit confused/concerned. That part of the RKH code has not changed, so the results from release 1.3.2 should be the same for 1.3.4 for that particular test. John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
