On 27/09/2010 23:47, John Horne wrote: > On Mon, 2010-09-27 at 12:53 +0200, William Maddler wrote: >> Hello, >> I keep getting a warning for apache2 using deleted files: >> >> [12:01:03] Checking running processes for deleted files [ Warning ] >> [12:01:03] Warning: The following processes are using deleted files: >> [12:01:03] Process: apache2 PID: 29241 File: >> /var/run/apache2/ssl_mutex >> >> I already tried whitelisting it, in fact a few lines below I get: >> >> [12:01:03] Info: Found process '/usr/sbin/apache2' using file >> '/var/run/apache2/ssl_mutex': it is whitelisted >> >> Am I missing anything? Do I have to whitelist apache2 with no specified >> file? Any suggestion? >> > > What have you put into the RKH config file for this?
Pretty simple: ALLOWPROCDELFILE=/usr/sbin/apache2:/var/run/apache2/ssl_mutex Thx William ------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing. http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
