On Wed, 2019-02-20 at 09:44 -0500, Mark Stosberg wrote:
> On Debian-basd systems, update /etc/defaults/rkhunter and set
> APT_AUTOGEN="true".
>
> This will run "rkhunter --propupd" after every run of "unattended-upgrades"--
> the nightly security updates.
>
I would be wary of using the '--propupd' option automatically. That would, in
effect, hide any changes made to any other files. It may be better to use the
package manager option (PKGMGR) in the rkhunter config file. That way any
updated packages should still verify okay (without using '--propupd'), but any
other modified files (packaged or not) will still be flagged when you run a
check.



John.

--
John Horne | Senior Operations Analyst | Technology and Information Services
University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK
________________________________
[http://www.plymouth.ac.uk/images/email_footer.gif]<http://www.plymouth.ac.uk/worldclass>

This email and any files with it are confidential and intended solely for the 
use of the recipient to whom it is addressed. If you are not the intended 
recipient then copying, distribution or other use of the information contained 
is strictly prohibited and you should not rely on it. If you have received this 
email in error please let the sender know immediately and delete it from your 
system(s). Internet emails are not necessarily secure. While we take every 
care, University of Plymouth accepts no responsibility for viruses and it is 
your responsibility to scan emails and their attachments. University of 
Plymouth does not accept responsibility for any changes made after it was sent. 
Nothing in this email or its attachments constitutes an order for goods or 
services unless accompanied by an official order form.

_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to