Hi all, ALLOWPROCDELFILE="/usr/lib/firefox/firefox:/var/tmp/*:/tmp/*"
Is that not the correct way to do it? It seems to me from the documentation that that should be correct, yet about 3 times/week rkhunter reports that process using deleted files in one of those directories. I have read the documentation, several times; perhaps I've misunderstood (sorry if so). So far searching the interwebs hasn't revealed the anser (to me). Thanks for rkhunter!! Very best, Sam -- http://www.fastmail.fm - Access your email from home and the web ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
