Hallo, Tanstaafl,
Du meintest am 19.05.10:
>> All you have to do is run RKH with the debug option. Something like:
>>
>> rkhunter --debug --enable properties
>>
>> This should create a file in the /tmp directory, it may be fairly
>> large. If you send me (not the list) both files, then I can take a
>> look.
> Sorry, should have been clearer...
> I googled how to do that, but what I balked at was installing both
> versions side by side...
It's quite simple!
Look for the file "/usr/bin/rkhunter" - it's a pure shellscript (nearly
human readable, for some kind of humans).
rkhunter -V
tells you the actual version.
If you first copy your current version to "rkhunter-1.3.6" (if that's
the version), then you can copy the older version into "/usr/bin" too,
get that version and rename it too.
And then you call
rkhunter-1.3.4 --debug --enable properties
rkhunter-1.3.6 --debug --enable properties
You get 2 files /tmp/rkhunter-debug.xyz (with different characters after
the dot); send them to John Horne.
Finally you copy your favorite version back to "rkhunter".
Viele Gruesse!
Helmut
------------------------------------------------------------------------------
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
