On Tue, 2009-12-29 at 22:14 +0000, Dick Gevers wrote:
> On Tue, 29 Dec 2009 21:57:57 +0000, John Horne wrote about Re:
> [Rkhunter-users] A few small remarks using rkh 1.3.6:
> 
> >I'm more confused as to why the second line has two slashes. Are you
> >using the '-r' (or ROOTDIR) option at all?
> 
> Aye, due to a discussion several versions back, where I believe the
> conclusion was that this was allowed, my rkhunter.conf has a line reading
> 
> ROOTDIR=/
> 
Hmm. Well the ROOTDIR code is not as good as it could be. (Personally I
think it needs a rewrite (big job), and clarification of what using
'-r' (ROOTDIR) actually means.) Generally using ROOTDIR=/ should make no
difference since Linux/UNIX systems treat '//' in a pathname the same as
'/'. In that respect RKH may well use and store files as '//...' but it
should not affect the tests. 

> >>From what you have said, I have no idea what is going on.
> >I would say first of all delete the 'rkhunter.dat' file completely. Then
> >run 'rkhunter --propupd' to let RKH recreate the file.
> 
> Now I disabled the ROOTDIR line and '--propupd' gives a good result in
> rkhunter.dat: one slash before each path.
> 
> So apparently the conclusion of wayback is no longer valid for 1.3.6.
> 
I would have to say so. Sorry.

> Does remain that '--propupd [ file ] ' is not doing what it says it should.
> 
Quite possibly true when ROOTDIR is used. I will check it, and modify
the RKH CVS version accordingly.

> So I hope this was of some help.
> 
Yes indeed, many thanks for reporting it.




John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to