So, I just wanted a confirmation, if there are changes to the passwd or groups, I will get a single warning. If I there are "other" changes these will be continuously reported every time rkhunter runs?
Thanks, Nick -----Original Message----- From: Nick Warr [mailto:[email protected]] Sent: 03 April 2013 09:24 To: [email protected] Subject: Re: [Rkhunter-users] A question about group_changes and passwd_changes That seems like something I can script probably.. Like I said, I'm ok with the fact that it considers it an important change.. my problem is that I have my warning emails hooked into a ticketing system. I'll see what making this change involves, and also have a look at what Doug Parsons suggested. Thanks for the confirmation of what I suspected. Nick -----Original Message----- From: John Horne [mailto:[email protected]] Sent: 02 April 2013 23:07 To: [email protected] Subject: Re: [Rkhunter-users] A question about group_changes and passwd_changes On Wed, 2013-04-03 at 00:16 +0300, Nerijus Baliunas wrote: > On Tue, 02 Apr 2013 20:25:24 +0100 John Horne > <[email protected]> wrote: > > > > I s there any other way I can tell rkhunter to not warn me, a – > > > no-I’m-really-serious-don’t –warn-me flag after propupd maybe? > > > > > There is no way at the moment I'm afraid. > > Is is probably easiest to copy manually /etc/passwd and group files to > /var/lib/rkhunter? > Well yes that will work :-) There is no way using just RKH command-line options though. John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Rkhunter-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/rkhunter-users
