Hi all, Rkhunter is being run every day on my laptop, and very smoothly. Instead of emailing me (which I didn't know how to configure) I have a small script that checks the rkhunter logs every day for certain strings, like for example "Warning". Yesterday I got a warning that the hash for this was showing a change:
/var/lib/rkhunter/db/i18n/de [ Warning ] It seems odd to me because it looks like that is only the German version of messages that rkhunter displays. Also there were no other errors reported, and that was the only one of those files that was changed (there are 5 in all). My OS is in English btw. I'm asking here because I'm not sure how to go about investigating this; reading the rkhunter logs doesn't seem to offer any clues. Also I would like to ask your expert opinion about something which may be related. I wonder if I should I add: APT_AUTOGEN="yes" to /etc/default/rkhunter in order to to enable automatic database updates. (This is an ubuntu 12.10 system.) Instead I have been just manually doing: /usr/bin/rkhunter --versioncheck and /usr/bin/rkhunter --update every time I do a software update. Thanks a lot, Sam -- http://www.fastmail.fm - A no graphics, no pop-ups email service ------------------------------------------------------------------------------ CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Businesses Are Choosing CenturyLink Cloud For Critical Workloads, Development Environments & Everything In Between. Get a Quote or Start a Free Trial Today. http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
