Le mercredi 07 février 2007 à 16:28 +0100, Dr. Markus Waldeck a écrit : > Hi, > > thanks for your prompt answer! > > > It is the standard and normal behaviour, as rkhunter keeps a local copy > > of these files to be able to report any changes made between 2 rkhunter > > checks. > > > > "Checking for differences in user accounts..." > > "Checking for differences in user groups..." > > I checked /etc/rkhunter.conf. > > It contains the line "TMPDIR=/var/lib/rkhunter/tmp". > > My tests revealed that the value of the enviroment variable TMPDIR is used if > it exists. Indeed, I hadn't noticed this behavior before.
> This could result in an unexpected behavior. Can you detail? If you have an environment variable like $TMPDIR, it should be a temporary directory anyway. Or maybe I don't understand the issue. If $TMPDIR is /tmp, I can see that the "permanent temporary" files named before will be deleted when you reboot, the tests will be skipped and this won't cause any problem. > For the correct behavior I will specify "--tempdir"! You can do this if you don't agree with the standard behavior, but I don't think it is worth changing the Debian package, unless I misunderstood the previous point. Cheers, Julien
