Re: [Rkhunter-users] Directories modified

2011-03-30 Thread unspawn
On Wed, 30 Mar 2011 12:15:09 +0200 David Lawn wrote: >Ahhh so I assume in that case rkhunter is unlinking, running it's checks and then prelinking again? RKH doesn't on its own: RPM uses prelinking by default. Regards, unSpawn --- ---

Re: [Rkhunter-users] Directories modified

2011-03-30 Thread David Lawn
On Tue, Mar 29, 2011 at 11:58 PM, wrote: > On Mon, 28 Mar 2011 17:55:11 +0200 David Lawn > wrote: >>Is this expected behaviour > > If your system uses prelink then, yes. > > > Regards, > unSpawn > --- > > Ahhh so I assume in that case rkhunter is unlinking, running it's checks and then prelink

Re: [Rkhunter-users] Directories modified

2011-03-29 Thread unspawn
On Mon, 28 Mar 2011 17:55:11 +0200 David Lawn wrote: >Is this expected behaviour If your system uses prelink then, yes. Regards, unSpawn --- -- Enable your software for Intel(R) Active Management Technology to meet t

[Rkhunter-users] Directories modified

2011-03-28 Thread David Lawn
Hi, In addition to running rkhunter I also use AIDE. When rkhunter runs it is updating the mtime and ctime of a few directories which is causing AIDE to alert. /usr/sbin /usr/bin /usr/lib64 /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/CORE /usr/libexec/awk /usr/lib/rpm /bin /lib64 /