On Thu, 2009-12-31 at 12:54 +1100, Michael Mansour wrote:
>
> The odd thing there is, I have:
> 
> PATH=/usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
> 
> for root's PATH and:
> 
> # ll /usr/bin/ssh /usr/local/bin/ssh
> -rwxr-xr-x 1 root root 312672 Oct  1 02:39 /usr/bin/ssh
> -rwxr-xr-x 1 root root 283580 Jan 22  2009 /usr/local/bin/ssh
> 
> # which ssh
> /usr/local/bin/ssh
> 
The test is for 'sshd' though, not the 'ssh' command.

> 
> Warning: Application 'sshd', version '4.3p2', is out of date, and possibly a
> security risk.
> 
> If I changed the APP_WHITELIST sshd entry to "sshd:4.3p2" and re-ran rkhunter,
> rkhunter will then warn about " 'sshd', version '4.9p1' ".
> 
Really?? Very odd. Can you show me the relevant output from each log
file (showing the sshd version found etc), and include the part of the
log file (near the top) which says what the 'command directories' are.
Thanks.



John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to