This is what I get: Checking for files with suspicious contents [ Warning ] [17:09:12] Warning: The suspscan temporary directory does not exist: /dev/shm
I know. On OpenBSD it doesn't. But I didn't get that message until recently. Hmm. I tried to uncomment it: # cat /usr/local/etc/rkhunter.conf | grep shm #ALLOWDEVFILE=/dev/shm/pulse-shm-* #ALLOWDEVFILE=/dev/shm/sem.ADBE_ReadPrefs_* #ALLOWDEVFILE=/dev/shm/sem.ADBE_REL_* #ALLOWDEVFILE=/dev/shm/sem.ADBE_WritePrefs_* #SUSPSCAN_TEMP=/dev/shm # but the warning still comes up. It has to make with suspscan: # rkhunter -c --enable suspscan leads to: [...] [18:51:45] Info: Test 'hidden_procs' disabled at users request. [18:51:45] [18:51:45] Performing check of files with suspicious contents [18:51:45] Info: Starting test name 'suspscan' [18:51:45] Directories to check are: /tmp /var/www/tmp [18:51:45] No temporary directory specified: using default (/dev/shm) [18:51:45] Checking for files with suspicious contents [ Warning ] [18:51:46] Warning: The suspscan temporary directory does not exist: /dev/shm [18:51:46] [18:51:46] Info: Test 'other_malware' disabled at users request. [...] I can only disable the test as such. Is there any better way? Uwe ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
