*SNIP*
> 
> I suspect you ran RKH with '--propupd', then changed the config to use
> the package manager ('PKGMGR=RPM'). This would then make your current
> file properties report many warnings. If you change the config to use,
> or not use, the package manager for checks, then you must run 'rkhunter
> --propupd' afterwards.
> 
> Run 'rkhunter --propupd' again, RKH should then run okay.
> 
> John.



 You must have a camera over my shoulder.  Yes. That is exactly what I
did (PKGMGR=RPM).  I changed the entry back to "NONE" and re-ran
propupd.  Now when I scan the file properties are mostly all "OK".

Exceptions in the File Property area are: (Warning)

[10:15:09] /usr/bin/GET                                      [ Warning ]
[10:15:09] Warning: The command '/usr/bin/GET' has been replaced by a
script: /usr/bin/GET: perl script text executable

[10:15:09] /usr/bin/groups                                   [ Warning ]
[10:15:09] Warning: The command '/usr/bin/groups' has been replaced by a
script: /usr/bin/groups: Bourne shel
l script text executable

[10:15:11] /usr/bin/ldd                                      [ Warning ]
[10:15:11] Warning: The command '/usr/bin/ldd' has been replaced by a
script: /usr/bin/ldd: Bourne shell scri
pt text executable

and a few more.  

But most of them are ok.  How do I go about checking the warnings in
File Properties?  

If I'm being too "questioning" please just tell me to go pound sand.  I
really appreciate your help (all of you).






------------------------------------------------------------------------------

_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to