On Wed, 2010-02-24 at 11:58 -0600, Sean Carolan wrote:
> Here's some more detail showing what the code does.  Any ideas?
> 
> bash -x rkhunter --enable 'properties'
> 
> + PKGMGR_VERIFY_RESULT=
> ++ /bin/rpm -q --queryformat
> '[%{FILEMODES:octal}:%{FILEUSERNAME}:%{FILEGROUPNAME}:%{FILESIZES}:%{FILEMTIMES}:%{FILEMD5S}:%{FILENAMES}\n]'
>
Try:

   rpm -q --queryformat '[%{FILEMODES:octal}:%{FILEUSERNAME}:
%{FILESIZES}:%{FILEMTIMES}:%{FILEMD5S}:%{FILENAMES}\n]'
-qf /bin/basename | grep ':/bin/basename'


(That's all on one line.)

However, the inode value comes from the 'stat' command, not rpm. So what
does this command say:

   stat -c "%i" /bin/basename



John.

-- 
John Horne                   Tel: +44 (0)1752 587287
University of Plymouth, UK   Fax: +44 (0)1752 587001

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to