#40 rkhunter warns about it's own config file

main
closed
unSpawn
None
5
2010-09-28
2010-08-25
WvV
No

I constantly get warning e-mails with the following content:

"""
Warning: Package manager verification has failed:
File: /etc/rkhunter.conf
The file hash value has changed
The file size has changed
The file modification time has changed

One or more warnings have been found while checking the system.
Please check the log file (/var/log/rkhunter.log)
"""

Runing 'rkhunter --propupd /etc/rkhunter.conf' doesn't fix it.

This is on opensuse 11.3 x86_64, rkhunter 1.3.6 is installed through opensuse's package manager yast...

How to fix this?

Discussion

  • unSpawn
    unSpawn
    2010-09-28

    Since you run RKH 1.3.6 please see your rkhunter.conf for USER_FILEPROP_FILES_DIRS directive and examples. If that doesn't work for you please get on the rkhunter-users mailing list because that will be faster and more efficient for both you and us, TIA.

     
  • unSpawn
    unSpawn
    2010-09-28

    • assigned_to: nobody --> unspawn
    • labels: 797250 -->
    • milestone: --> main
    • status: open --> closed