[Rkhunter-users] Broken link on FAQ page

2009-10-11 Thread Tanstaafl
Hello, I just wanted to report a broken link on the sourceforge FAQ page: https://sourceforge.net/docman/display_doc.php?docid=35179group_id=155034 3.1) Rootkit Hunter tells me there is something wrong with my system. What do I do? A. Prior to any incident it is recommended that you have

[Rkhunter-users] Question re: os_specific check

2009-10-11 Thread Tanstaafl
Hello, New to rkhunter, just installed 1.3.4 and had a question. On the first run I had some of the normal false positives and fixed them (whitelisted the 3 commands that are replaced by scripts on my system (normal), and whitelisted the hidden .udev directory), but I want to be sure about what

Re: [Rkhunter-users] Question re: os_specific check

2009-10-11 Thread John Horne
On Sun, 2009-10-11 at 16:37 -0400, Tanstaafl wrote: I found a recommendation to disable the 'os_specific' check in DISABLED_TESTS in rkhunter.conf to fix this The config file provided by us makes no such recommendation. , but, what other tests/checks are being disabled by this? Or is it

Re: [Rkhunter-users] Question re: os_specific check

2009-10-11 Thread Tanstaafl
On 10/11/2009 5:30 PM, John Horne wrote: I found a recommendation to disable the 'os_specific' check in DISABLED_TESTS in rkhunter.conf to fix this The config file provided by us makes no such recommendation. Sorry, I was not clear... the recommendation I found was while googling... Heh -

Re: [Rkhunter-users] Question re: os_specific check

2009-10-11 Thread John Horne
On Sun, 2009-10-11 at 18:00 -0400, Tanstaafl wrote: On 10/11/2009 5:30 PM, John Horne wrote: I found a recommendation to disable the 'os_specific' check in DISABLED_TESTS in rkhunter.conf to fix this The config file provided by us makes no such recommendation. Sorry, I was not clear...