Yes,
I've discovered that in my old computer there is a file called
90rkhunter in /etc/apt/apt.conf.d which automatically updates the hashes
after a program installation or upgrade.
What I want to check is that nobody changes a file not that I can't
update my machine (I doubt that an hacker uses apt to install a rootkit).
Xwang
unsp...@hushmail.com ha scritto:
On Wed, 11 Mar 2009 22:26:57 +0100 John Horne
<john.ho...@plymouth.ac.uk> wrote:
I take it you are not referring to the --pkgmgr option of rkhunter
(or
PKGMGR in the /etc/rkhunter.conf file) which, when set to DPKG,
will use
the package manager for the file properties test.
I *think* he's talking about 'debsums' behaviour where you could
have a "/etc/apt/apt.conf.d/40debsums" where "DPkg::Post-Invoke"
automagically creates hashes for installed packages. In my humble
opinion automatically updating the database without reviewing
logged changes is as good as not using any filesystem integrity
verification at all...
Regards, unSpawn
---
--
Give back to your community. Click here to start a new career as a Police
officer.
http://tagline.hushmail.com/fc/BLSrjkqaIWcXY5cYM4ZQdzvcoWrYXQy2lM9TknE4x3bIbFTqcZWhdqqZJ76/
------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
