On Tue, 2011-08-02 at 00:46 +0100, Arthur Dent wrote:

> OK - Thanks John, that works.

Ooops. Spoke too soon....

From this morning's run:

---------------------- Start Rootkit Hunter Scan ----------------------
Warning: The following processes are using deleted files:
         Process: /bin/bash    PID: 2954    File: /tmp/fileFYLlb4
         Process: /bin/gawk    PID: 3419    File: /tmp/fileFYLlb4


From /etc/rkhunter.conf.local:

ALLOWPROCDELFILE="/bin/bash:/tmp/file*"
ALLOWPROCDELFILE="/bin/gawk:/tmp/file*"

What gives?

Thanks again.

Mark

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
The must-attend event for mobile developers. Connect with experts. 
Get tools for creating Super Apps. See the latest technologies.
Sessions, hands-on labs, demos & much more. Register early & save!
http://p.sf.net/sfu/rim-blackberry-1
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to