I have a machine with an extra user with root privileges, for legitimate
reasons. I have patched
rkhunter by hand to whitelist the extra user, in this case called pepper,
by altering line 4928:
users_with_uid0=`grep -v '^:0:0:::' ${ROOTDIR}etc/passwd | grep ":0:" |
cut -d ":" -f1,3 | grep '0' | grep -vE '(root|pepper):0'`
of PROGRAM_version="1.2.9".
Of course it would be nicer to make a whitelist entry in the config file
instead of altering the rkhunter script, but I don't know how to do that.
John Horne
Rkhunter
None
Public
|
Date: 2007-03-29 16:08
|
| Field | Old Value | Date | By |
|---|---|---|---|
| status_id | Open | 2007-03-29 16:08 | jhorne |
| resolution_id | None | 2007-03-29 16:08 | jhorne |
| assigned_to | nobody | 2007-03-29 16:08 | jhorne |
| close_date | - | 2007-03-29 16:08 | jhorne |