>>>> It's a known problem caused by prelinking
>>>>   
>>> OK .. but how can we fix/get around this in RKHunter?
>>>
>> The only way I can think of is if you use the RPM package manager.
>> Running 'rpm -Vf /usr/bin/less' it should give no error (it will show no
>> output at all). If you set the PKGMGR option in rkhunter.conf, then run
>> 'rkhunter --propupd' afterwards.
>>
> Doh! No that won't work, rpm verification uses prelinking itself. I
> suspect the only possible way would be to disable the 'hashes' test
> completely. I can think of no other way of avoiding the problem. I'll
> look in to some method that could be used for the next release.

I have just been playing around with removing the relevant three lines from the 
rkhunter.dat file but that didn't work.

The only way I have found so far is to remove the three files from 
"PROP_FILE_LIST" in "/usr/local/bin/rkhunter".

Dan

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to