On Mon, Oct 28, 2019 at 00:31 AM, Koblenz Thomas wrote: > Hello, > > I have a problem with a false-positive for Suspicious Shared Memory segments. > Since the last update of the Commvault Agent I always get warnings for > Suspicious Shared Memory segments. > > [08:18:25] Process: /opt/commvault/Base64/cvd PID: 758 Owner: root [ > Found ] > [08:18:25] Process: /opt/commvault/Base64/cvd PID: 758 Owner: root [ > Found ] > > > I have already made the following entry in the rkhunter.log > ALLOWIPCPROC= "/opt/commvault/Base64/cvd
I suspect you meant to say in the rkhunter.conf file, but I think the error is in placing a space and quote before the path. Shouldn't it read: ALLOWIPCPROC=/opt/commvault/Base64/cvd -Al- > Unfortunately we still get mails informing us about a warning. Is it possible > to configure rkhunter to stop sending mail when a whitelist has been > configured? > > Version : Rootkit Hunter 1.4.2, Deb9.11 > > > > Thomas
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
