On 2011-06-27 5:24 PM, John Horne wrote: > The stored time is the modification time on the file when '--propupd' > was last used, not the time when '--propupd' was run.
Ok, I guess I'm just dumb... What is the difference between 'using' --propupd and 'running' --propupd? I thought its only purpose was to update these mod times so that it thinks they are all good/safe? >>> Are you using a package manager? >> >> Yes - Gentoo's... I am using the standard ebuild in portage... > Sorry, no I mean are you using an rkhunter package manager in your > config file? No idea what that means... so, probably, no... > I can't think of any immediate reason for the warnings to continuously > appearing. However I have a slight nagging that I did read of this some > time ago for another user. > > You could run 'rkhunter --propupd --debug' and email me the debug file > dumped in /tmp if you want. Will do, but it will have to wait a bit... Also - any idea why I'm getting duplicates of every list message? ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
