On Wed, 03 Oct 2012 11:31:00 +0200 "Nick" <swcodfat...@gmail.com> wrote: >File:/usr/sbin/adduser::1484606:0777:0:0:7:1338383153:: >File:/usr/sbin/pwck::1482128:0755:0:0:32288:1329932395:: >File:/usr/sbin/userdel::1483266:0750:0:0:55568:1329932395:: >File:/usr/sbin/usermod::1484619:0750:0:0:79920:1329932395:: > >Some have hashes others don't.
>Though you can see above in the .dat file it has no hash. /usr/sbin/adduser is a symlink to useradd but the others are binaries. To see what happens could you attach (off list) the output of running 'rkhunter --propupd --debug'? TIA, unSpawn --- ------------------------------------------------------------------------------ Don't let slow site performance ruin your business. Deploy New Relic APM Deploy New Relic app performance management and know exactly what is happening inside your Ruby, Python, PHP, Java, and .NET app Try New Relic at no cost today and get our sweet Data Nerd shirt too! http://p.sf.net/sfu/newrelic-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users