On Mon, 2009-11-30 at 11:07 -0500, Dimitri Yioulos wrote: > I, too, got a fp regarding hdparm > in /etc/rc.d/rc.sysinit. At least in my CentOS > systems, the hdparm directives seem to be > defaults. I've implemented the suggestion by > John Horne that I > add "RTKT_FILE_WHITELIST="/etc/rc.d/rc.sysinit" > in rkhunter.conf. However, by the mere fact that > rc.sysinit is checked by rkunter as a place where > rootkits might cause issues makes me uneasy about > whitelisting that file in its entirety. Is there > no way to deal just with the hdparm part of this > issue? > >From the rkhunter.conf file:
# NOTE: It is recommended that if you whitelist any files, then you # include those files in the file properties check. See the # USER_FILEPROP_FILES_DIRS configuration option. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Join us December 9, 2009 for the Red Hat Virtual Experience, a free event focused on virtualization and cloud computing. Attend in-depth sessions from your desk. Your couch. Anywhere. http://p.sf.net/sfu/redhat-sfdev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
