On 2010-05-17 6:25 PM, John Horne wrote: > On Mon, 2010-05-17 at 17:36 -0400, Tanstaafl wrote: >> Ok - so, you're saying this (the 'immutable' test) is a *new* test >> that didn't exist in 1.3.4? Remember, 1.3.4 was running for many >> months without ever having one warning like this.
> No. The test has been there for a long time (since 1.3.0 at least). > > There were changes made to whether the test should run, but as far as I > can see these only affected BSD systems. Gentoo is not mentioned at all > in this respect. Hmmm... ok, so what is the actual test name? In my config file, for both 1.3.4 and now for 1.3.6, I had/have: ENABLE_TESTS="all" DISABLE_TESTS="apps deleted_files hidden_procs loaded_modules packet_cap_apps suspscan" So, with this config, should 1.3.4 have been running this test? If so, why did it not complain, but 1.3.6 is complaining now? Sorry, I'm not trying to be difficult... :( ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
