On Thu, 16 Sep 2010 18:58:00 -0600 Kevin Fenzi <kevin@xxxxxxxxx> wrote: > On Thu, 16 Sep 2010 10:19:50 -0400 > Steve Blackwell <zephod@xxxxxxxxxx> wrote: > > > Hmmm... Well this is strange. Even though I've added > > ALLOWHIDDENDIR=/etc/.java to my /etc/rkhunter.conf file, I'm still > > getting warnings. Is there a way to tell what rkhunter is reading > > from the conf file? > > Well, it should read /etc/rkhunter.conf and also > /etc/rkhunter.conf.local (which is the better place to make local > changes that still allow you to get changes from package updates to > /etc/rkhunter.conf. > > Are you sure this is a dir and not a file? > > You could try --debug I suppose. > > kevin /etc/.java is definitely a directory $ ls -ld /etc/.java drwxr-xr-x. 3 root root 4096 2010-08-27 21:01 /etc/.java I don't have a /etc/rkhunter.conf/local file $ ls -al /etc/rkhunter* -rw-r-----. 1 root root 31048 2010-09-03 09:54 /etc/rkhunter.conf -rw-r-----. 1 root root 31030 2010-06-26 20:48 /etc/rkhunter.conf.rpmnew I ran: # rkhunter --check --debug and I have a file in /tmp Doh!!! Never mind. I have fat fingers. I typed: ALLOWHIDDEBDIR=/etc/.java instead of ALLOWHIDDENDIR=/etc/.java in my conf file. Apologies for the noise. Steve -- Changing lives one card at a time http://www.send1cardnow.com
Attachment:
signature.asc
Description: PGP signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines