On Fri, 04 Dec 2009 07:39:38 +0100 gordy <lqa...@gmail.com> wrote: >2) In the cli check and in the log ... not found under the rootkit >section
>[14:19:38] Warning: Checking for possible rootkit strings [ Warning ] >[14:19:38] Found string 'hdparm' in file '/etc/init.d/bootlogd'. Possible rootkit: Xzibit Rootkit >[14:19:38] Found string 'hdparm' in file '/etc/init.d/checkroot.sh'. Possible rootkit: Xzibit Rootkit Everyone with a hdparm false positive related to /etc/*rc* files, please see John's reply to Dick Gevers in the mailing list archive of 2009/11/29: add the resource file to RTKT_FILE_WHITELIST configuration option and put it into your rkhunter.conf.local file. If you whitelist files then add those files to the USER_FILEPROP_FILES_DIRS configuration option. Regards, unSpawn --- ------------------------------------------------------------------------------ Join us December 9, 2009 for the Red Hat Virtual Experience, a free event focused on virtualization and cloud computing. Attend in-depth sessions from your desk. Your couch. Anywhere. http://p.sf.net/sfu/redhat-sfdev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
