On 2011-07-01 9:57 AM, Tanstaafl wrote:
> Ok - but again, I ran --propupd, and got the email warning about the
> same 6 files, then went and grabbed the current .log and .log.old files...
Ok, I'm really not stupid, I promise, just had tunnel vision I guess...
I was running it from the cron direct
On 2011-07-01 9:40 AM, John Horne wrote:
>> Attached are the two logs... the .old is last nights nightly run, and
>> the .log is a --propupd I just ran a few minutes ago...
> Something not quite right:
>
> rkhunter.log: [08:54:50] Info: Command line is /usr/sbin/rkhunter
> --cronjob --nocolo
On Fri, 2011-07-01 at 09:05 -0400, Tanstaafl wrote:
> On 2011-07-01 6:27 AM, John Horne wrote:
> > I'll need to see the output from '--debug' then or perhaps the (whole)
> > log file when you run 'rkhunter --propupd' and from when the system run
> > of rkhunter occurs (I can compare the two then).
On Fri, 2011-07-01 at 08:03 -0400, Tanstaafl wrote:
> On 2011-07-01 6:27 AM, John Horne wrote:
> > I'll need to see the output from '--debug' then or perhaps the (whole)
> > log file when you run 'rkhunter --propupd' and from when the system run
> > of rkhunter occurs (I can compare the two then).
On 2011-07-01 6:27 AM, John Horne wrote:
> I'll need to see the output from '--debug' then or perhaps the (whole)
> log file when you run 'rkhunter --propupd' and from when the system run
> of rkhunter occurs (I can compare the two then).
Ok - but just for clarification - both of the overwrite to
On Thu, 2011-06-30 at 16:06 -0400, Tanstaafl wrote:
> On 2011-06-30 3:36 PM, John Horne wrote:
> > You'll need to check your system - perhaps with something like 'locate'
> > - to see if RKH has been installed more than once.
>
> Nope, there's only one rkhunter.dat:
>
> myhost : Thu Jun 30, 16:03
