I've tried
ALLOWDEVFILE=/dev/shm/usb-*
and it doesn't work
Xwang

John Horne ha scritto:
> On Wed, 2009-12-30 at 17:38 +0100, xwang1...@email.it wrote:
>> Hi to all,
>> I would like to know why I otai the following warning:
>>
>> [17:35:52] Performing filesystem checks
>> [17:35:52] Info: Starting test name 'filesystem'
>> [17:35:52] Info: SCAN_MODE_DEV set to 'THOROUGH'
>> [17:35:52] Info: Found file '/dev/shm/pulse-shm-2099550880': it is 
>> whitelisted.
>> [17:35:52]   Checking /dev for suspicious file types         [ Warning ]
>> [17:35:52] Warning: Suspicious file types found in /dev:
>> [17:35:52]          /dev/shm/usb-0000:00:1d.7-5:CNF7246: data
>>
>> even if I've whitelisted it in the configuration file:
>>
> 
>> ALLOWDEVFILE=/dev/shm/usb-0000:00:1d.7-5:CNF7246
>> ALLOWDEVFILE=/dev/shm/pulse-shm-*
>>
> It's a bug caused by the filename having colons (:) in it. We will need
> to look and see how we can get around that.
> 
> You should be able to whitelist the file using either:
> 
>    ALLOWDEVFILE=/dev/shm/usb-0000
> 
> or something like
> 
>    ALLOWDEVFILE=/dev/shm/usb-*
> 
> 
> 
> 
> 
> John.
> 

------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
Rkhunter-users mailing list
Rkhunter-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to