On Sat, 2010-11-20 at 16:30 +0000, John Horne wrote: > On Sat, 2010-11-20 at 14:17 +0000, Dick Gevers wrote: > > Hi, > > > > 1.3.8 works fine for me. Thanks for the latest version! > > > > Except it says in the logs: > > > > [23:51:10] Info: Starting test name 'deleted_files' > > [23:51:11] Checking running processes for deleted files [ Warning ] > > [23:51:11] Warning: The following processes are using deleted files: > > [23:51:11] Process: /sbin/udevd PID: 121 File: /sbin/udevd > > [23:51:11] Process: /usr/bin/dbus-daemon PID: 668 > > File: /tmp/init.aOpvHx [23:51:11] > > Process: /usr/sbin/console-kit-daemon PID: 692 File: /tmp/init.aOpvHx > > [23:51:11] Process: /usr/lib64/polkit-1/polkitd PID: 705 > > File: /tmp/init.aOpvHx > > > > etc. etc. > > > > But in rkhunter.conf all of those processes are described as > > ALLOWPROCDELFILE="/sbin/udevd" > > etc. > > > > Moreover, rkhunter.conf says: > > ENABLE_TESTS="all" > > and: > > # DISABLE_TESTS=... > > > > I have done --propupd, --update, -C and the warnings persist. > > > > Probably I am doing stg stupid somewhere, but I can't find what it might be. > > > > Any ideas please? > > > I can't see anything obviously wrong. > Damn. It's a bug. I'll send you a fixed drop-in version of rkhunter. I've had a look to see if there are any other similar ones, and could see none.
John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Beautiful is writing same markup. Internet Explorer 9 supports standards for HTML5, CSS3, SVG 1.1, ECMAScript5, and DOM L2 & L3. Spend less time writing and rewriting code and more time creating great experiences on the web. Be a part of the beta today http://p.sf.net/sfu/msIE9-sfdev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
