On Mon, 13 Sep 2010 11:56:03 +0100 John Horne <john.ho...@plymouth.ac.uk> wrote:
> > I have similar problem with wine. When there are no wine apps running, > > I get no warning, but with wine running I get the warning. > > I made a diff of lsof output with wine running and not - it seems the > > following > > opened directory is guilty: > > +n/mnt/d/winnt4nowin/windows/system > > Is it possible to whitelist it somehow? > > > Yes, use the rootkit file whitelist option. If I use RTKT_FILE_WHITELIST="/mnt/d/winnt4nowin/windows/system" rkhunter says Whitelisted rootkit file does not exist: /mnt/d/winnt4nowin/windows/system If I use RTKT_DIR_WHITELIST="/mnt/d/winnt4nowin/windows/system" (as it is a directory), I still get the warning. Regards, Nerijus ------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users