On Tue, 2011-08-02 at 10:51 +0100, John Horne wrote: > > > Yeah, I noticed that yesterday, I'm not convinced that wildcarding works > with that option. It is something that I need to look at. For the moment > all I can suggest is either remove the wildcarding so that you just > whitelist bash and gawk or specify the exact filenames. However, > depending on how often the /tmp file change that may not work too well.
A quick look through the emailed rkh run reports shows that it changes (at least) every day. Sorry to be a pain... Mark
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA The must-attend event for mobile developers. Connect with experts. Get tools for creating Super Apps. See the latest technologies. Sessions, hands-on labs, demos & much more. Register early & save! http://p.sf.net/sfu/rim-blackberry-1
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users