>>>> It's a known problem caused by prelinking >>>> >>> OK .. but how can we fix/get around this in RKHunter? >>> >> The only way I can think of is if you use the RPM package manager. >> Running 'rpm -Vf /usr/bin/less' it should give no error (it will show no >> output at all). If you set the PKGMGR option in rkhunter.conf, then run >> 'rkhunter --propupd' afterwards. >> > Doh! No that won't work, rpm verification uses prelinking itself. I > suspect the only possible way would be to disable the 'hashes' test > completely. I can think of no other way of avoiding the problem. I'll > look in to some method that could be used for the next release.
I have just been playing around with removing the relevant three lines from the rkhunter.dat file but that didn't work. The only way I have found so far is to remove the three files from "PROP_FILE_LIST" in "/usr/local/bin/rkhunter". Dan ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users