Hello all, I just upgraded from 1.3.6 to 1.3.8 on my Fedora 13 system, and on each RKH run I get a the following warning:
Warning: The following processes are using deleted files:
Process: /usr/libexec/mysqld PID: 1499 File: /tmp/ib5ks4lI
Process: /bin/mailx PID: 9802 File: /tmp/Rsva0iNT
Process: /usr/bin/mlogc PID: 19422 File:
/var/tmp/etilqs_pYL81MNhaXiONAm
The thing is, I have this in my /etc/rkhunter.conf:
# This is a space-separated list of process names. The option
# may be specified more than once.
#
#ALLOWPROCDELFILE="/sbin/cardmgr /usr/sbin/gpm:/etc/X11/abc"
#ALLOWPROCDELFILE="/usr/libexec/gconfd-2"
#ALLOWPROCDELFILE="/usr/sbin/mysqld"
ALLOWPROCDELFILE="/usr/libexec/mysqld"
ALLOWPROCDELFILE="/bin/mailx"
ALLOWPROCDELFILE="/usr/bin/mlogc"
In the 1.3.6 .conf file these entries did not have quotes around them.
When the 1.3.8 runs complained I added the quotes but neither way seems
to work.
I even tried creating a /etc/rkhunter.conf.local file with those entries
in, but still the warnings come...
I'm sure it's a PEBKAC [1] problem but could someone please steer me in
the right direction?
Thanks
Mark
[1] Problem Exists Between Keyboard And Chair
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Increase Visibility of Your 3D Game App & Earn a Chance To Win $500! Tap into the largest installed PC base & get more eyes on your game by optimizing for Intel(R) Graphics Technology. Get started today with the Intel(R) Software Partner Program. Five $500 cash prizes are up for grabs. http://p.sf.net/sfu/intelisp-dev2dev
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
