rkhunter Question.

[Colin J Thomson - G6AVK]

On Thursday 08 January 2009 14:38:25 Gene Heskett wrote:
> They say a little paranoia is a good thing, so I installed the rkhunter
> rpm, which in turn apparently sets itself up as a cron job.
>
> I got emails from it bitching about a couple of perfectly legit files, and
> I found out where to whitelist them, so that warning is gone.  While I was
> at it I enabled another set of tests that weren't by default, the
> additional_rkts.
>
> Now it is complaining about the lack of copies for passwd and group, but
> they do exist as name- files.  Is this a foible of rkhunter, or a
> redhatism?
>
> Recommended fix?

This is fixed in updates-pending (could be updates-testing by now) which is 
version: rkhunter-1.3.4-1.fc10

HTH

Colin
-- 
Fedora 10 (Cambridge)
Registered Linux user number #342953