On Thu, 2011-06-30 at 16:06 -0400, Tanstaafl wrote: > On 2011-06-30 3:36 PM, John Horne wrote: > > You'll need to check your system - perhaps with something like 'locate' > > - to see if RKH has been installed more than once. > > Nope, there's only one rkhunter.dat: > > myhost : Thu Jun 30, 16:03:07 : ~ > # locate rkhunter.dat > /var/lib/rkhunter/db/rkhunter.dat > /var/lib/rkhunter/db/rkhunter.dat.old > myhost : Thu Jun 30, 16:04:54 : ~ > # > I'll need to see the output from '--debug' then or perhaps the (whole) log file when you run 'rkhunter --propupd' and from when the system run of rkhunter occurs (I can compare the two then).
John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
