I have a machine with an extra user with root privileges, for legitimate reasons. I have patched
rkhunter by hand to whitelist the extra user, in this case called pepper, by altering line 4928:
users_with_uid0=`grep -v '^:0:0:::' ${ROOTDIR}etc/passwd | grep ":0:" | cut -d ":" -f1,3 | grep '0' | grep -vE '(root|pepper):0'`
of PROGRAM_version="1.2.9".
Of course it would be nicer to...
2007-01-18 19:47:30 UTC in Rootkit Hunter
