On Thu, 2010-05-27 at 08:51 -0700, Duane Loftus wrote:
>
> Now, we can move on to actually using rkhunter. The first scan produced
> a number of warnings. Practically ALL of the "properties checks"
> produced a warning (see below). Is this a configuration error?
>
>
> [08:36:46] Performing file properties checks
> [08:36:46] Info: Starting test name 'properties'
> [08:36:46] Checking for prerequisites [ OK ]
> [08:36:47] /bin/awk [ OK ]
> [08:36:50] /bin/basename [ Warning ]
> [08:36:50] Warning: Package manager verification has failed:
> [08:36:50] File: /bin/basename
> [08:36:50] The file modification time has changed
>
Okay, I should *read* the message before replying :-)
I suspect you ran RKH with '--propupd', then changed the config to use
the package manager ('PKGMGR=RPM'). This would then make your current
file properties report many warnings. If you change the config to use,
or not use, the package manager for checks, then you must run 'rkhunter
--propupd' afterwards.
Run 'rkhunter --propupd' again, RKH should then run okay.
John.
--
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001
------------------------------------------------------------------------------
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
