On Thu, 2011-07-21 at 00:47 +0300, Nerijus Baliunas wrote:
> On Wed, 20 Jul 2011 14:23:46 +0100 John Horne <john.ho...@plymouth.ac.uk> 
> wrote:
> 
> > It is unfortunate, but unavoidable really, that the current version of
> > RKH (1.3.8 or earlier) has hit a problem which will affect all Fedora 15
> > users of rkhunter until the package is updated with the relevant patch.
> 
> Hmm, I use Fedora rkhunter package on F15 and don't have any problems.
> 
If you are using the RPM package manager in RKH, then the script check
is skipped if the package check passes the size and hash tests.

(The idea being that in a package a program may possibly change from
being a binary command to a script and that this shouldn't cause a
warning. However, the script check is only skipped provided the hash
test and size checks pass, since to maliciously modify a file from a
binary to a script without causing a change in hash or size would be
virtually impossible.)




John.

-- 
John Horne, University of Plymouth, UK
Tel: +44 (0)1752 587287    Fax: +44 (0)1752 587001


------------------------------------------------------------------------------
5 Ways to Improve & Secure Unified Communications
Unified Communications promises greater efficiencies for business. UC can 
improve internal communications as well as offer faster, more efficient ways
to interact with customers and streamline customer service. Learn more!
http://www.accelacomm.com/jaw/sfnl/114/51426253/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to