On Thu, 2009-12-31 at 12:54 +1100, Michael Mansour wrote: > > The odd thing there is, I have: > > PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin > > for root's PATH and: > > # ll /usr/bin/ssh /usr/local/bin/ssh > -rwxr-xr-x 1 root root 312672 Oct 1 02:39 /usr/bin/ssh > -rwxr-xr-x 1 root root 283580 Jan 22 2009 /usr/local/bin/ssh > > # which ssh > /usr/local/bin/ssh > The test is for 'sshd' though, not the 'ssh' command.
> > Warning: Application 'sshd', version '4.3p2', is out of date, and possibly a > security risk. > > If I changed the APP_WHITELIST sshd entry to "sshd:4.3p2" and re-ran rkhunter, > rkhunter will then warn about " 'sshd', version '4.9p1' ". > Really?? Very odd. Can you show me the relevant output from each log file (showing the sshd version found etc), and include the part of the log file (near the top) which says what the 'command directories' are. Thanks. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users