I have these in my /etc/rkhunter.conf.local: SCRIPTWHITELIST=/usr/bin/unhide.rb
ALLOWHIDDENDIR=/etc/.java ALLOWHIDDENDIR=/dev/.udev ALLOWHIDDENDIR=/dev/.static ALLOWHIDDENFILE=/dev/.blkid.tab ALLOWHIDDENFILE=/dev/.blkid.tab.old ALLOWDEVFILE=/dev/.initramfs However for the .initramfs, there's an upstream bug (http://sourceforge.net/mailarchive/message.php?msg_id=28252358) preventing this option from working with symlinks. See bug 883324 for the details and fix. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/219840 Title: rkhunter reports hidden directories under /dev To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/rkhunter/+bug/219840/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
