Re: [Rkhunter-users] Directories modified

[David L. <dav...@gm...>]

On Tue, Mar 29, 2011 at 11:58 PM,  <un...@hu...> wrote:
> On Mon, 28 Mar 2011 17:55:11 +0200 David Lawn
> <dav...@gm...> wrote:
>>Is this expected behaviour
>
> If your system uses prelink then, yes.
>
>
> Regards,
> unSpawn
> ---
>
>

Ahhh so I assume in that case rkhunter is unlinking,  running it's
checks and then prelinking again?
That's the only way I've been able to reproduce the mtime and ctime
modifications.

I will modify my AIDE config to ignore these changes.

Thanks
David