On Thu, 2010-05-27 at 10:22 +0100, John Horne wrote: > On Wed, 2010-05-26 at 21:52 -0700, Duane Loftus wrote: > > > > OK .. guess I really screwed the pooch here somehow. NOW when I go to > > do a scan I get the following: > > > > ][r...@ip-208-109-24-147 ~]# rkhunter -c -sk > > System startup file is a symbolic link: /etc/rc.local > > > > What did I do? I changed some variables in the rkhunter.conf file > > on /etc/rkhunter.conf - but what? > > > I suspect you have set the STARTUP_PATHS config option. Remove it, RKH > will detect the startup paths just fine for Fedora. > > I would recommend leaving the default installed config file alone, and > then run RKH. Then only modify those options which cause a warning, > everything else will be automatically detected.
I went into rkhunter.conf and commented out the line: #BINDIR="/bin /usr/bin /sbin /usr/sbin /usr/local/bin /usr/local/sbin /usr/libexec /usr /local/libexec" But I am still getting the "symbolic link: /etc/rc.local" response. r...@ip-208-109-24-147 /]# rkhunter --propupd [ Rootkit Hunter version 1.3.6 ] File updated: searched for 159 files, found 131 [r...@ip-208-109-24-147 /]# rkhunter -c -sk System startup file is a symbolic link: /etc/rc.local [r...@ip-208-109-24-147 /]# Unfortunately, I messed around with rkhunter.conf before reading your advice to do a rkhunter.conf.local. Should I do another reinstall? (tail between legs and droopy eyes) ------------------------------------------------------------------------------ _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
