On Tue, 2014-08-12 at 09:04 +0800, Gordon wrote: > > OP has > > ALLOWPROCDELFILE="/usr/lib/firefox/firefox:/var/tmp/*:/tmp/*" > > I thought you need file pathway per line? > >From the config file:
# Allow the specified process to use deleted files. The process name may be # followed by a colon-separated list of full pathnames. So for this option he has used one pathname (the process name) on the line, but it is followed by two pathnames as part of the option. That is allowed for this option. > secondly I don't use " > Previously the use of quotes was optional. For the latest release they should not be used as quotes are perfectly valid as part of a filename! (The OP is using a slightly older version of RKH, so the quotes will be stripped.) John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
