Date: Tue, 06 Nov 2007 17:54:17 +0100 From: Peo Nilsson <per-olof.nilsson@comhem.se> To: FreeBSD quest-list <freebsd-questions@freebsd.org> Subject: Re: /usr/bin/whatis replaced by a script (correct?) Message-ID: <1194368058.68992.3.camel@zeus.se> In-Reply-To: <44sl3jjsw2.fsf@be-well.ilk.org> References: <1194271235.19142.4.camel@zeus.se> <44sl3jjsw2.fsf@be-well.ilk.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-ozwXDvRpnb/bbOwkwpmG Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Mon, 2007-11-05 at 22:31 -0500, Lowell Gilbert wrote: > Peo Nilsson <per-olof.nilsson@comhem.se> writes: >=20 > > When running rkhunter 1.3.0 I get those warnings: > > > > ...<snip> > > /usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: > > Bourne shell script text executable > They aren't replaced. They are all *supposed* to be scripts. Thanks for the info. After knowing this, I edited rkhunter.conf like this: RTKT_FILE_WHITELIST=3D"/usr/bin/whatis /usr/sbin/adduser /usr/local/bin/GET= /usr/local/sbin/pkgdb" When running 'rkhunter -c' I still get the same warnings as before... What am I missing? --=20 /Peo --=-ozwXDvRpnb/bbOwkwpmG Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQBHMJw2gWSfflYlIbwRAjYRAKCpePyRhlODDv8s6W6vTgMrbeogigCgpD2T p39F/IMdvs4ZbXv59+YJ87c= =wD1Y -----END PGP SIGNATURE----- --=-ozwXDvRpnb/bbOwkwpmG--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1194368058.68992.3.camel>