That's a possibility, yes. But a bit inconvenient. Let's assume such scenario,
which actually happened to me:
yum install telnet
got a message from nightly cron - Warning: The file '/usr/bin/telnet' exists on 
the system, but it is not present in the 'rkhunter.dat' file.
rkhunter --propupd /usr/bin/telnet
got a message Filename is not in the "rkhunter.dat" file: /usr/bin/telnet
So now I have to add USER_FILEPROP_FILES_DIRS=/usr/bin/telnet
to /etc/rkhunter.local, run rkhunter --propupd /usr/bin/telnet
and then delete USER_FILEPROP_FILES_DIRS=/usr/bin/telnet
from /etc/rkhunter.local (because I like my config files clean).
Much more convenient would be to accept rkhunter --propupd /usr/bin/telnet
even if it does not exist in "rkhunter.dat" file.

Regards,
Nerijus

On Sat, 28 Oct 2017 03:25:42 -0700 Al Varnell <alvarn...@mac.com> wrote:

> In order to use your own local configuration, add the following file 
> 
> /etc/rkhunter.local
> 
> that contains the following line:
> USER_FILEPROP_FILES_DIRS=/usr/bin/telnet
> 
> -Al-
> 
> On Sat, Oct 28, 2017 at 03:09 AM, Nerijus Baliunas via Rkhunter-users wrote:
> > 
> > Hello,
> > 
> > I installed telnet on the system, and got:
> > Warning: The file '/usr/bin/telnet' exists on the system, but it is not 
> > present in the 'rkhunter.dat' file.
> > 
> > Tried to run:
> > # rkhunter --propupd /usr/bin/telnet
> > Filename is not in the "rkhunter.dat" file: /usr/bin/telnet
> > 
> > I had to run rkhunter --propupd. I propose to make
> > rkhunter --propupd /usr/bin/telnet
> > work, i.e. to be able to add file to the rkhunter.dat
> > even if it does not exist in the database.
> > 
> > Regards,
> > Nerijus


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to