On Wed, 2009-12-30 at 01:13 +1100, Michael Mansour wrote: > > So it seems if I wanted to whitelist the sshd versions above, I'd then really > need two entries like: > > APP_WHITELIST="httpd:2.2.3 named:9.3.6-P1 sshd:4.9p1 sshd:4.3p2 php:5.1.6 > openssl:0.9.8e" > > ie. if the code supports that. > Well it won't complain about it :-) However, it only tests for one app at a time. That is, if 'sshd' is found then it is tested. It doesn't then look for further occurances of sshd.
The test works by looking for the app (e.g. 'sshd') in the root PATH. It then tests that app. So if you have sshd installed in /sbin and /usr/local/sbin, but your PATH is '/sbin:/usr/local/sbin' then only /sbin/sshd is checked. The /usr/local/sbin/sshd file is ignored. John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
