* John Horne <john.ho...@plymouth.ac.uk> wrote: > On Wed, 2014-06-11 at 02:10 +0200, Jens Schüßler wrote: > > * Michael Lopez <mike123...@hotmail.com> wrote: > > > To whom it may concern: > > > > > > I have a question about warnings. > > > > > > I opened up my rkhunter.log file and this is what I discovered for > > > certain files: > > > > > > 11:50:53] Performing file properties checks > > > [11:50:53] Checking for prerequisites [ OK ] > > > [11:50:55] /usr/local/bin/rkhunter [ OK ] > > > [11:50:57] /bin/awk [ Warning ] > > > [11:50:57] Warning: No hash value found for file '/bin/awk' in the > > > 'rkhunter.dat' file. > > > [11:50:57] /bin/basename [ Warning ] > > > [11:50:57] Warning: No hash value found for file '/bin/basename' in the > > > 'rkhunter.dat' file. > > > [11:50:58] /bin/bash [ Warning ] > > > ....etc > > > > > > What does it mean when a hash vaule is not found for certain files in the > > > rkhunter.dat file? > > > > > > How would I repair this? > > > Any assistance would be greatly appreciated. > > > > If you install updates to your system prior to rkhunter getting them.. it > > will report them incorrectly, cause it still has the hashes of the older > > package in rkhunter.dat > > You need to re-create the hashes. This will remove a lot of the false > > positives. > > > > Read the part USING PACKAGE MANAGERS in README > > /usr/share/doc/rkhunter/README.gz > > > Overall I would agree, but in this instance it says there is 'no hash > value' not a changed (old) value. It implies that no hash value was > previously stored for some reason. I assume that '--propupd' was used > previously?
Late night posting. Of course you're right, the warning text would be different if there were a stored hash value. ------------------------------------------------------------------------------ HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions Find What Matters Most in Your Big Data with HPCC Systems Open Source. Fast. Scalable. Simple. Ideal for Dirty Data. Leverages Graph Analysis for Fast Processing & Easy Data Exploration http://p.sf.net/sfu/hpccsystems _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
