On Wed, 2010-05-19 at 06:25 -0400, Tanstaafl wrote:
> On 2010-05-18 3:58 PM, John Horne wrote:
> > On Tue, 2010-05-18 at 08:52 -0400, Tanstaafl wrote:
> >> In my config file, for both 1.3.4 and now for 1.3.6, I had/have:
> >>
> >> ENABLE_TESTS="all"
> >> DISABLE_TESTS="apps deleted_files hidden_procs loaded_modules
> >> packet_cap_apps suspscan"
> >>
> >> So, with this config, should 1.3.4 have been running this test? If so,
> >> why did it not complain, but 1.3.6 is complaining now?
>
> > I can't say. You would have to run a debug session using 1.3.4 and then
> > do the same using 1.3.6. By comparing the two will show what is going
> > on.
>
> Double hmmm.... since ianap and am not comfortable trying to debug this
> myself, I guess I'm off to the gentoo forums to see if anyone there can
> answer this...
>
All you have to do is run RKH with the debug option. Something like:
rkhunter --debug --enable properties
This should create a file in the /tmp directory, it may be fairly large.
If you send me (not the list) both files, then I can take a look.
John.
--
John Horne Tel: +44 (0)1752 587287
University of Plymouth, UK Fax: +44 (0)1752 587001
------------------------------------------------------------------------------
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
