At 03:07 PM Thursday, 1/8/2009, you wrote -=> >On Thu, 2009-01-08 at 14:16 -0800, Ed Kasky wrote: > > > > > > >One or more warnings have been found while checking the system. > > >Please check the log file (/var/log/rkhunter.log) > > >Can you check the top of your /var/log/rkhunter.log file to ensure that >it is using the /etc/rkhunter.conf configuration file. There will be a >line in there saying what config file RKH is using. > >John.
Duh... It was looking at /usr/local/etc/rkhunter.conf and not /etc/rkhunter.conf I made the change and now get some errors in 1.3.4 that look like they could be potential bugs based on my searches: # rkhunter -c --rwo --sk Error: Invalid display - language keyword cannot be found: Display line: display --to LOG --type INFO CONFIG_ROOTDIR_DFLT Error: Invalid display - language keyword cannot be found: Display line: display --to LOG --type PLAIN --result OK --log-indent 2 ROOTKIT_LINK_COUNT /etc Error: Invalid display - language keyword cannot be found: Display line: display --to LOG --type PLAIN --result OK --log-indent 4 ROOTKIT_LINK_COUNT /sbin/init Error: Invalid display - language keyword cannot be found: Display line: display --to LOG --type INFO CONFIG_STARTUP_PATHS /etc/rc.d/rc.local /etc/rc.d/rc.sysinit /etc/rc.d Error: Invalid display - language keyword cannot be found: Display line: display --to SCREEN+LOG --type PLAIN --color GREEN --result FOUND --log-indent 2 --screen-indent 4 STARTUP_CHECK_FILES_EXIST Error: Invalid display - language keyword cannot be found: Display line: display --to SCREEN+LOG --type PLAIN --color GREEN --result NONE_FOUND --log-indent 2 --screen-indent 4 STARTUP_CHECK_FILES_MALWARE Ed ........................................................................... Randomly Generated Quote (1388 of 1503): We should be careful to get out of an experience only the wisdom that is in it -- and stop there -- lest we be like the cat that sits down on a hot stove-lid. She will never sit down on a hot stove-lid again, and that is well; but also she will never sit down on a cold one any more. -Mark Twain, (1835-1910) ------------------------------------------------------------------------------ Check out the new SourceForge.net Marketplace. It is the best place to buy or sell services for just about anything Open Source. http://p.sf.net/sfu/Xq1LFB _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
