Hi,
I'm using Rootkit Hunter 1.4.0 (source file, not RPM) on Centos 5.9 (Final) 32
bit
I've put this in /etc/rkunter.conf:
ALLOWPROCDELFILE="/usr/sbin/httpd"
ALLOWPROCDELFILE="/usr/local/apache/bin/httpd"
# file /usr/sbin/httpd
/usr/sbin/httpd: symbolic link to `/usr/local/apache/bin/apachectl'
# file "/usr/local/apache/bin/httpd"
/usr/local/apache/bin/httpd: ELF 32-bit LSB executable, Intel 80386, version 1
(SYSV), for GNU/Linux 2.6.9, dynamically linked (uses shared libs), not
stripped
However, I've received this:
Warning: The following processes are using deleted files:
Process: httpd PID: 18361 File:
/usr/local/apache/logs/ssl_mutex
How it's possible? What's wrong on my conf?
Thank you!
------------------------------------------------------------------------------
Own the Future-Intel® Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users
