On Thu, 2011-07-07 at 00:11 +0200, unsp...@hushmail.com wrote: > On Wed, 06 Jul 2011 17:18:16 +0200 Kevin Fenzi <ke...@scrye.com> > wrote: > >John, could you post your updated version (or ideally a patch)? > > Revision is 1.397: > http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/r > khunter?r1=1.396&r2=1.397, patch relative to 1.396: > http://rkhunter.cvs.sourceforge.net/viewvc/rkhunter/rkhunter/files/r > khunter?r1=1.396&r2=1.397&view=patch. > > > >What were you changing here? Output from file? > > From the looks of it chiefly the grep regex. > Hi,
The patch unSpawn showed above should work fine. The 'grep' change was to remove braces '{}' being detected as globbing characters. They are not actually part of globbing, and so can be used in filenames, but are sometimes expanded by the shell itself. E.g 'touch fred{1}abc' creates the file 'fred{1}abc'. But 'touch fred{1,2}abc' creates 2 files - 'fred1abc' and 'fred2abc'. Not allowing braces in a filename was a bug. The correction for the 'file' command output problem was the 'egrep' change where I simply included a comma (,) as being allowed in the output. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ All of the data generated in your IT infrastructure is seriously valuable. Why? It contains a definitive record of application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-d2d-c2 _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users