Date: Wed, 14 Nov 2007 18:18:13 +0100 From: Peo Nilsson <per-olof.nilsson@comhem.se> To: freebsd-questions@freebsd.org Subject: Re: /usr/bin/whatis replaced by a script (correct?) Message-ID: <1195060693.1610.3.camel@zeus.se> In-Reply-To: <1194368058.68992.3.camel@zeus.se> References: <1194271235.19142.4.camel@zeus.se> <44sl3jjsw2.fsf@be-well.ilk.org> <1194368058.68992.3.camel@zeus.se>
next in thread | previous in thread | raw e-mail | index | archive | help
--=-B4ZABE3ECCnZ0m9pjF2u Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Tue, 2007-11-06 at 17:54 +0100, Peo Nilsson wrote: > On Mon, 2007-11-05 at 22:31 -0500, Lowell Gilbert wrote: > > Peo Nilsson <per-olof.nilsson@comhem.se> writes: > >=20 > > > When running rkhunter 1.3.0 I get those warnings: > > > > > > ...<snip> > > > /usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: > > > Bourne shell script text executable >=20 > > They aren't replaced. They are all *supposed* to be scripts. >=20 > Thanks for the info. >=20 > After knowing this, I edited rkhunter.conf like this: > RTKT_FILE_WHITELIST=3D"/usr/bin/whatis /usr/sbin/adduser /usr/local/bin/G= ET /usr/local/sbin/pkgdb" >=20 > When running 'rkhunter -c' I still get the same warnings as before... > What am I missing? Solved, but many thanks anyway. I should have set SCRIPTWHITELIST insteed of RTKT_FILE_WHITELIST, wich I did first. --=20 /Peo ---------------------------------------------- - PGP signed/encrypted emails is prefered -=20 ---------------------------------------------- --=-B4ZABE3ECCnZ0m9pjF2u Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQBHOy3QgWSfflYlIbwRAiyQAJ0UEZyj3/pDbc/IVpD2goy8pEI4RwCfSvg/ oLSNSGENUpmQqQIuvfjSkRA= =3a7M -----END PGP SIGNATURE----- --=-B4ZABE3ECCnZ0m9pjF2u--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1195060693.1610.3.camel>