On Wed, 2010-02-24 at 11:58 -0600, Sean Carolan wrote: > Here's some more detail showing what the code does. Any ideas? > > bash -x rkhunter --enable 'properties' > > + PKGMGR_VERIFY_RESULT= > ++ /bin/rpm -q --queryformat > '[%{FILEMODES:octal}:%{FILEUSERNAME}:%{FILEGROUPNAME}:%{FILESIZES}:%{FILEMTIMES}:%{FILEMD5S}:%{FILENAMES}\n]' > Try:
rpm -q --queryformat '[%{FILEMODES:octal}:%{FILEUSERNAME}: %{FILESIZES}:%{FILEMTIMES}:%{FILEMD5S}:%{FILENAMES}\n]' -qf /bin/basename | grep ':/bin/basename' (That's all on one line.) However, the inode value comes from the 'stat' command, not rpm. So what does this command say: stat -c "%i" /bin/basename John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users