The man page didn't state the order that config files were considered and how multiple occurrences of the same value might be handled. Attached is a patch to the man page to clarify that first the "rkhunter.d" directory is checked, then the "local" file and finally the main config file. If there are multiple files in the ".d" directory, the option that appears in the last file by alphabetical order will be selected.
I don't want to sign up for a Sourceforge account to submit a single doc-patch. Thanks, -- *Mark Stosberg* (he/him) Director of Systems & Security m...@rideamigos.com | 765.277.1916 https://www.rideamigos.com <https://rideamigos.com/> Changing the way the world commutes. <https://www.linkedin.com/company/rideamigos> <https://www.twitter.com/rideamigos> <https://www.facebook.com/rideamigos> <https://www.instagram.com/rideamigos> <https://rideamigos.com/newsletter-sign-up/>
--- rkhunter-1.4.6/files/rkhunter.8 2017-11-29 11:14:02.000000000 -0500 +++ rkhunter-1.4.6-patched/files/rkhunter.8 2022-07-19 16:06:08.752461038 -0400 @@ -157,11 +157,16 @@ .IP .SH OPTIONS -\fBrkhunter\fP uses a configuration file, named \fIrkhunter.conf\fP, for many of -its configuration options. It can also use a local configuration file, named -\fIrkhunter.conf.local\fP, and a directory named \fIrkhunter.d\fP if it is present. -Both the local configuration file, and the local directory, must be in the same -directory as the main configuration file. The installer does not create the local +\fBrkhunter\fP uses a configuration file, named \fIrkhunter.conf\fP, for many +of its configuration options. It can also use a local configuration file, named +\fIrkhunter.conf.local\fP, and a directory named \fIrkhunter.d\fP if it is +present. Both the local configuration file, and the local directory, must be in +the same directory as the main configuration file. For single-value options, +the first match that's found is used, starting with the \fIrkhunter.d\fP +directory in reverse-alphatical order, then the local config file and finally +\fIrkhunter.conf\fP is considered. + +The installer does not create the local file or directory, but one, or both, can be created by the user if required. If a directory is used, then within the directory any file ending in \fI.conf\fP will be treated as a local configuration file.
_______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
