#84 ALLOWPROCDELFILE handling

closed-duplicate
John Horne
Detection (54)
5
2012-01-24
2011-12-19
pyllyukko
No

Multiple entries in ALLOWPROCDELFILE doesn't work. This is probably because of the "IFS=$IFSNL" at line 11895 (rkhunter 1.8.3).

Example output from bash -x rkhunter:

+ ALLOWPROCDELFILES='/sbin/cardmgr /usr/sbin/gpm:/etc/X11/abc'

...

+ RKHTMPVAR2='/sbin/cardmgr /usr/sbin/gpm'
+ '[' /usr/bin/perl5.12.3 = '/sbin/cardmgr /usr/sbin/gpm' ']'

Discussion

  • John Horne
    John Horne
    2012-01-24

    Already fixed in CVS version.

     
  • John Horne
    John Horne
    2012-01-24

    • assigned_to: nobody --> jhorne
    • status: open --> closed-duplicate