On Tue, 2010-05-18 at 08:52 -0400, Tanstaafl wrote: > On 2010-05-17 6:25 PM, John Horne wrote: > > On Mon, 2010-05-17 at 17:36 -0400, Tanstaafl wrote: > >> Ok - so, you're saying this (the 'immutable' test) is a *new* test > >> that didn't exist in 1.3.4? Remember, 1.3.4 was running for many > >> months without ever having one warning like this. > > > No. The test has been there for a long time (since 1.3.0 at least). > > > > There were changes made to whether the test should run, but as far as I > > can see these only affected BSD systems. Gentoo is not mentioned at all > > in this respect. > > Hmmm... ok, so what is the actual test name? > 'immutable'.
> In my config file, for both 1.3.4 and now for 1.3.6, I had/have: > > ENABLE_TESTS="all" > DISABLE_TESTS="apps deleted_files hidden_procs loaded_modules > packet_cap_apps suspscan" > > So, with this config, should 1.3.4 have been running this test? If so, > why did it not complain, but 1.3.6 is complaining now? > I can't say. You would have to run a debug session using 1.3.4 and then do the same using 1.3.6. By comparing the two will show what is going on. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
