That's how I was understanding it, with the confirmation, I can now write instructions on how to deal with the warnings received. A flag, or script would be nice, but as long as I can be confident about how and why I am receiving a report, or reports, I am happy.
Nick -----Original Message----- From: Carel Fenijn [mailto:c.h.c.fen...@issc.leidenuniv.nl] Sent: 03 April 2013 12:43 To: Nick Warr Cc: rkhunter-users@lists.sourceforge.net Subject: Re: [Rkhunter-users] A question about group_changesand passwd_changes Hi Nick, On Wed, Apr 03, 2013 at 11:32:19AM +0100, Nick Warr wrote: > So, I just wanted a confirmation, if there are changes to the passwd or groups, I will get a single warning. Indeed. You could let a wrapper script take care of the passwd and group file, that is the way I do it. Alternatively, the developer of rkhunter could make it an optional feature to also update the passwd and group files, e.g. only if a variable is set, for backward compatibilty the behaviour can remain the same if that variable is not set. > If I there are "other" changes these will be continuously reported every time rkhunter runs? Unless the config file of rkhunter is adjusted as needed and rkhunter --propupd is run. Cheers, -- Carel Fenijn Systeembeheer Unix/Linux ICT Shared Service Centre (ISSC) Universiteit Leiden +31 71 527 6867 Niels Bohrweg 1 2333 CA Leiden www.issc.leidenuniv.nl <blocked::http://www.issc.leidenuniv.nl/> Helpdesk: +31 71 527 8888 ------------------------------------------------------------------------------ Minimize network downtime and maximize team effectiveness. Reduce network management and security costs.Learn how to hire the most talented Cisco Certified professionals. Visit the Employer Resources Portal http://www.cisco.com/web/learning/employer_resources/index.html _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users
