On Tue, 2014-09-02 at 12:37 +0300, Nerijus Baliunas wrote: > On Tue, 2 Sep 2014 09:33:34 +0200 (CEST) "absolutely_f...@libero.it" > <absolutely_f...@libero.it> wrote: > > > Warning: The following processes are using deleted files: > > Process: /usr/libexec/hald-addon-keyboard.#prelink#.HVZwbG PID: > > 3591 File: /usr/libexec/hald-addon-keyboard.#prelink#.HVZwbG > > > > what is the correct way to bypass this? > > Most probably restarting haldaemon service (service haldaemon restart) will > make these > warnings go away. > Correct. It's not possible to whitelist the process (or file) as it has been deleted. With prelinked systems it's a problem.
FYI, I ran up a RHEL 7 system and noticed that prelinking now seems to be turned off by default. John. -- ---------------------------------------------------- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK ------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
