On Sun, 2010-05-09 at 18:13 +0200, Helmut Hullen wrote: > Hallo, John, > > Du meintest am 09.05.10: > > >> RTKT_FILE_WHITELIST=/etc/init.d/RCS/boot.local.neu,v > >> # wegen Xzibit > > > Why are you whitelisting this file? It is not checked for as a > > rootkit file. > > You can see the reason in the remark line: "rkhunter" guessed there > might be a "xzibit" virus. Together with "/etc/init.d/boot.local". > Ah, okay. I assume the file (boot.local) contains 'hdparm' in it?
John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
