On Tuesday 22 December 2009 6:16:35 pm John Horne wrote: > On Tue, 2009-12-22 at 15:13 -0500, Dimitri Yioulos wrote: > > On Tuesday 22 December 2009 3:03:48 pm John > > Horne > > > > wrote: > > > On Tue, 2009-12-22 at 14:16 -0500, Dimitri > > > > Yioulos wrote: > > > > All, > > > > > > > > The best of the holiday season to all! > > > > > > > > I'm working on a side project, and have > > > > installed the latest RKH on an openSuse > > > > box. By design, eth0 is in promiscuous > > > > mode, and RKH picks up on this. I've > > > > edited rkhunter.conf to allow this > > > > (ALOWPROMISCIF="eth0"), then > > > > > > ^^^^^^^^^^^^^ > > > > > > This should have two 'L' in it - > > > ALLOWPROMISCIF. > > > > > > > > > > > > John. > > > > > > -- > > > John Horne, University of Plymouth, UK > > > Tel: +44 (0)1752 587287 Fax: +44 (0)1752 > > > 587001 > > > > Er, sorry John, my poorly transposed > > spelling. It does have 2 L's. > > In which case I would next say look in the > rkhunter log file to see if it says anything > about this. If it is detecting the whitelisted > interface then it should say so when the > 'promisc' test runs. > > > > > John. > > -- > John Horne, University of Plymouth, UK > Tel: +44 (0)1752 587287 Fax: +44 (0)1752 > 587001 >
I did, and it does: [14:27:21] Performing checks on the network interfaces [14:27:21] Info: Starting test name 'promisc' [14:27:21] Info: Network interfaces allowed to be in promiscuous mode: eth0 [14:27:21] Checking for promiscuous interfaces [ Warning ] [14:27:21] Warning: Possible promiscuous interfaces: [14:27:22] 'ifconfig' command output: [14:27:22] 'ip' command output: eth0 Dimitri -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
