On Tue, 2009-01-13 at 14:39 +0800, Uwe Dippel wrote:
>
> 1. rkhunter.conf out of the box needs several modifications. My
> suggestion is and remains, that tailored rkhunter.conf-s will be
> installed; depending on the uname.
> 
I would suggest submitting this into the sourceforge tracker system. It
will then get considered (and not lost) - but that does not mean that it
will be accepted!

> 2. Apache still furnishes a warning, whatever I Ido:
> APP_WHITELIST="httpd"
> APP_WHITELIST="httpd:1.3.29"
> Neither spares me from the warning mail about an infected system; it
> actually is the only warning.
> [10:54:53] Info: Application 'gpg' not found.
> [10:54:53]   Checking version of Apache                      [ Warning ]
> [10:54:54] Warning: Application 'httpd', version '1.3.29', is out of
> date, and possibly a security risk.
>
Can you check the log file. As far as I remember it should show what
versions it is comparing.

> 3. This sequence tends to make me smile:
>   Performing OpenBSD specific checks
>     Checking sockstat and netstat commands                   [ Skipped ]
> That default rkhunter.conf skips on OpenBSD what is explicitly written for it.
> 
Again, check the log file. It will say why it is skipping the test (from
what I remember it will be due to missing commands on your system).



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 587287
E-mail: john.ho...@plymouth.ac.uk       Fax: +44 (0)1752 587001

------------------------------------------------------------------------------
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to