Hallo, John, Du meintest am 09.05.10:
>>> Why are you whitelisting this file? It is not checked for as a >>> rootkit file. >> >> You can see the reason in the remark line: "rkhunter" guessed there >> might be a "xzibit" virus. Together with "/etc/init.d/boot.local". > Ah, okay. I assume the file (boot.local) contains 'hdparm' in it? You're right - for forced setting DMA. And there are still machines who need that way. Viele Gruesse! Helmut ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
