Date: Wed, 14 Nov 2007 18:18:13 +0100 From: Peo Nilsson <per-olof.nilsson@comhem.se> To: freebsd-questions@freebsd.org Subject: Re: /usr/bin/whatis replaced by a script (correct?) Message-ID: <1195060693.1610.3.camel@zeus.se> In-Reply-To: <1194368058.68992.3.camel@zeus.se> References: <1194271235.19142.4.camel@zeus.se> <44sl3jjsw2.fsf@be-well.ilk.org> <1194368058.68992.3.camel@zeus.se>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Tue, 2007-11-06 at 17:54 +0100, Peo Nilsson wrote: > On Mon, 2007-11-05 at 22:31 -0500, Lowell Gilbert wrote: > > Peo Nilsson <per-olof.nilsson@comhem.se> writes: > > > > > When running rkhunter 1.3.0 I get those warnings: > > > > > > ...<snip> > > > /usr/bin/whatis' has been replaced by a script: /usr/bin/whatis: > > > Bourne shell script text executable > > > They aren't replaced. They are all *supposed* to be scripts. > > Thanks for the info. > > After knowing this, I edited rkhunter.conf like this: > RTKT_FILE_WHITELIST="/usr/bin/whatis /usr/sbin/adduser /usr/local/bin/GET /usr/local/sbin/pkgdb" > > When running 'rkhunter -c' I still get the same warnings as before... > What am I missing? Solved, but many thanks anyway. I should have set SCRIPTWHITELIST insteed of RTKT_FILE_WHITELIST, wich I did first. -- /Peo ---------------------------------------------- - PGP signed/encrypted emails is prefered - ---------------------------------------------- [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQBHOy3QgWSfflYlIbwRAiyQAJ0UEZyj3/pDbc/IVpD2goy8pEI4RwCfSvg/ oLSNSGENUpmQqQIuvfjSkRA= =3a7M -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1195060693.1610.3.camel>