On Sun, 30 Mar 2008 21:20:31 +0000, Dick Gevers wrote about Re: [Rkhunter-users] One ALLOWPROCDELFILE entry is ignored:
>On Sun, 30 Mar 2008 22:03:35 +0100, John Horne wrote about Re: >[Rkhunter-users] One ALLOWPROCDELFILE entry is ignored: > >>RKH does not impose any limit of its own since the shell will do this >>for us. >> >>As with unSpawn I can see no problem with this. I have done some testing >>and cannot see where the problem may be. Can you run 'rkhunter --debug >>--enable deleted_files' please, and then email to unSpawn and myself >>the /tmp/rkhunter-debug file. > >Okay, I'll set the twice daily run to ''--debug'' until it appears again >because the hit appears only about once per 1 or 2 weeks. Just a note to show I haven't forgotten this: there's just nada to report. So late last week I changed my script to an hourly debug run, simply to try and catch stg. I'll be back when there's a real hit (or a whitelisting). Cheers, =Dick Gevers= ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
