John,
Thanks for the reply. I didn't realize "cat" had options to check for
non-printable characters. Thanks for that tip. I did find that there was a
"space" the end of one of my lines. That must have been the difference.
I'm surprised that rkhunter was sensitive to a space at the end of the file
name. A lot of other parses are relaxed about that.
Mark
On Fri, Nov 10, 2017 at 6:35 PM John Horne <john.ho...@plymouth.ac.uk>
wrote:
> On Fri, 2017-11-10 at 15:09 +0000, Mark Stosberg wrote:
> > I'm using rkhunter 1.4.4.
> >
> > I added several whitelists for ALLOWIPCPROC exceptions to
> > rkhunter.conf.local, and they all work but this one:
> >
> > ALLOWIPCPROC=/usr/lib/x86_64-linux-gnu/notify-osd
> >
> > I continue to daily "shared segment" warnings about this one:
> >
> Hello,
>
> I'm wondering if perhaps you have a control character stuck in there
> somewhere,
> so causing the pathname not to match. Try running
> 'cat -vet rkhunter.conf.local | grep IPC' and check the output to see if it
> shows anything unusual.
>
>
>
>
> John.
>
> --
> John Horne | Senior Operations Analyst | Technology and Information
> Services
> University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK
> ________________________________
> [http://www.plymouth.ac.uk/images/email_footer.gif]<
> http://www.plymouth.ac.uk/worldclass>
>
> This email and any files with it are confidential and intended solely for
> the use of the recipient to whom it is addressed. If you are not the
> intended recipient then copying, distribution or other use of the
> information contained is strictly prohibited and you should not rely on it.
> If you have received this email in error please let the sender know
> immediately and delete it from your system(s). Internet emails are not
> necessarily secure. While we take every care, Plymouth University accepts
> no responsibility for viruses and it is your responsibility to scan emails
> and their attachments. Plymouth University does not accept responsibility
> for any changes made after it was sent. Nothing in this email or its
> attachments constitutes an order for goods or services unless accompanied
> by an official order form.
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Rkhunter-users mailing list
> Rkhunter-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/rkhunter-users
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
