Hi.
This is probably only a documentation issue:
When having a value like:
#SUSPSCAN_DIRS=/tmp /var/tmp
which has a default of "/tmp /var/tmp" and which is not explicitly set as such in the default rkhunter.conf...
When I now add e.g.
SUSPSCAN_DIRS="/var/www"
to rkhunter.conf.local, I'd expect that the resulting value is:
SUSPSCAN_DIRS=/tmp /var/tmp /var/www
Just as the documentation section in the beginning says, i.e. when having options that allow it multiple times to be set, the values are concatenated, and only if the option would be set to the null string "", the former values (in this case, the defaults) would get erased.
But apparently the resulting value is just "/var/www".
So it should be documented, that if a value is set explicitly on such multi-value option, defaults are not taken.
Cheers,
Chris.
Okay, I understand that. It makes sense. I have changed the config file comments to include:
Fixed in CVS.