On Mon, 2008-04-21 at 14:31 -0500, Darren Dittrich wrote: > A minor issue for those that might be purposely running preloaded > libs... > Currently the only notification I recv from rkhunter 1.3.x is: > Warning: Checking for preload file [ Warning ] > Warning: Found library preload file: /etc/ld.so.preload > > Since we have a requirement to log all user commands, we typically run > pkgs like "snoopy" on many of our boxes. As a result, ld.so.preload > contains: /lib/snoopy.so > > It would be wonderful if we could whitelist a preload file to prevent > rkhunter from complaining. > At the moment the only thing you can do is disable the 'shared_libs' test in your config file (look for DISABLE_TEST and add 'shared_libs' to it).
John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 587001 ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
