On Tue, 2010-01-26 at 15:21 +0000, Graham Murray wrote: > John Horne <john.ho...@plymouth.ac.uk> writes: > > > In which case we might see this problem suddenly explode as systems > > upgrade to file-5.04. My Fedora 11 system currently uses file-5.03, and > > as far as I can see the development of Fedora 13 still uses 5.03. > > However it could well be that 5.04 will be pushed out at some time soon, > > and that Arch Linux have simply been the first to do it. > > It is not necessarily file 5.04 which is the problem. I am running > Gentoo and have recently upgraded file to 5.04 and I get this, which > looks correct. > > $ file /usr/sbin/rkhunter > /usr/sbin/rkhunter: POSIX shell script text executable > > $ file --version > file-5.04 > magic file from /usr/share/misc/magic > Okay, thanks for that. The actual wording comes from the magic file. It is possible, but I cannot really see why, that Arch Linux have changed the wording in the magic file for their distro.
For the moment there is not much we can do about this. I have put a fix into the CVS version of RKH based on what has already been seen, and I may take a quick look at Arch to see what they have done. But it may well be that we simply need to wait until other systems have upgraded and see what happens (if anything). John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users