Re: [Rkhunter-users] rkhunter Daily Run: where's the warning?

[Quinn C. <qu...@st...>]

>>    --append-log $TMPFILE1
> Which tells me you're either running FC or Aurora...

I'm running RHEL 4.

> I also overlooked this:
> [...]
> could be that.

I'm aware there is no md5 database for rhel 4. If so, do you know a way 
to make this warning quiet? I actually have access to a 
freshly-installed rhel 4 machine, if it would be helpful I could 
contribute to this database.


> What does /etc/sysconfig/rkhunter contain?
> Does it include the logfile switch?

Here is the output of that:

[root@two/0 ~]$cat /etc/sysconfig/rkhunter 
# System configuration file for Rootkit Hunter which
# stores RPM system specifics for cron run, etc.
#
#    MAILTO= <email address to send scan report>
# DIAG_SCAN= no  - perform  normal  report scan
#            yes - perform detailed report scan
#                  (includes application check)

MAILTO=root@localhost
DIAG_SCAN=no


> Could you gzip and attach the logfile?

Attached.

Thanks for looking into this.

Q