Le jeudi 15 novembre 2007 à 20:17 +0100, "Adam Cécile (Le_Vert)" a
écrit :
> Hello,
> 
> I'm using default cron on all my boxes. In fact, cron.daily appears to 
> be only one command "run-parts" to cron (see /etc/crontab) and every 
> scripts get append to the previous one in the report.

May you please copy lines regarding rkhunter contained in one this
report?
Aren't these lines related to a log file analyser (logwatch, logcheck
etc.)?

On all my machines, rkhunter seems to behave fine, each report is sent
individually by e-mail.

> Moreover rootkit check scripts can report false positive if several are 
> run at the same (hidden process check et stuff), so I'd rather having 
> one cron script for each apps so I can easily avoid them to be run at 
> the same.

It is not the case thanks to run-parts.
>From run-parts(8):
"Files  are  run in the lexical sort order of their names"

ie. scripts are *not* launched together but one after the other.


Cheers,
Julien

> Regards, Adam.
> 
> 
> Julien Valroff a écrit :
> > Hi Adam,
> > 
> > Le mardi 13 novembre 2007 à 16:52 +0100, Adam Cécile (Le_Vert) a
> écrit :
> >> Package: rkhunter
> >> Version: 1.3.0-2
> >> Severity: wishlist
> >>
> >> Hi,
> >>
> >> Rkhunter daily report is really important to me, so I'd love to get
> it's 
> >> own cron report instead of having just a few rkhunter lines lost in
> the 
> >> whole cron.daily report.
> > 
> > It is already the case if you use standard cron.
> > I would guess you use fcron (or alike), in this case I am pretty
> sure
> > you can configure it to deliver an e-mail for each daily cron task.
> You
> > may even be able to filter which report needs to be sent separately
> > (this is a guess only).
> > 
> > Would you please check on this side, as daily cron job facility
> makes it
> > easy for the sysadmin to change the time when tasks are run (and
> avoid
> > him from editing several separate cron scripts to suit his needs).
> > 
> > Cheers
> > Julien
> > 
> > 
> 
> 




Reply via email to