Thread: Fw: [Rkhunter-users] Re:Email problem after upgade
Brought to you by:
dogsbody
From: Kent O. <fo...@ds...> - 2006-03-26 22:44:05
|
I changed the email in the rkhunter.conf and it did not change anything. I then changed the email address in the /etc/cron.daily/01-rkhunter file and it still dosnt work. > > ----- Original Message ----- > From: "unspawn" <un...@ro...> > To: <rkh...@li...> > Sent: Thursday, March 23, 2006 2:18 PM > Subject: Re: [Rkhunter-users] Re:Email problem after upgade > > >> On Thu, 23 Mar 2006, Kent Olsen wrote: >>>> grep -i ^mail.*= /path/to/rkhunter.conf /etc/cron.daily/01-rkhunter >>>> /etc/cron.d/run_rkhunter >>> >>> When I run the command I get: grep: /etc/cron.d/run_rkhunter: No such >>> file or directory >> >> Just means you didn't use the contributed run_rkhunter script, no >> problem. >> Where you able to locate the email address in the config and/or cronjob? >> >> >> Cheers, unSpawn >> >> >> >> ------------------------------------------------------- >> This SF.Net email is sponsored by xPML, a groundbreaking scripting >> language >> that extends applications into web and mobile media. Attend the live >> webcast >> and join the prime developer group breaking into this new coding >> territory! >> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >> _______________________________________________ >> Rkhunter-users mailing list >> Rkh...@li... >> https://lists.sourceforge.net/lists/listinfo/rkhunter-users >> >> > |
From: Kent O. <fo...@ds...> - 2006-03-27 20:17:58
|
I found the problem. It was in /etc/sysconfig/rkhunter I removed the "@localhost" from MAILTO=root@localhost Thanks unspawn wrote: > On Sun, 26 Mar 2006, Kent Olsen wrote: > >> I changed the email in the rkhunter.conf and it did not change >> anything. I >> then changed the email address in the /etc/cron.daily/01-rkhunter >> file and >> it still dosnt work. > > > OK. Then we've got to check some other things. > > How is RKH run on your system? Only from /etc/cron.daily/01-rkhunter > or are there any other scripts that access it? > > How did you upgrade RKH, from tarball or an RPM? If from RPM, did you > build it yourself or was it apt/yum/autoupdated from a repository? If > you built it yourself, did you customise it or did you "rpm -tb > tarball"? If the RPM was from a repo, what's the exact location of the > package? > > The last thing to check is if we can find any "mail=" strings: > grep -i .*mail.*= -r /etc /var/spool 2>/dev/null|tee /tmp/tee.$$ > Either spot it OTF or wade through /tmp/tee.$$ for clues. Can be a > rather large list depending on your system (200 to 500 lines). If this > doesn't turn up anything useful you could expand greps scope to other > parts of your FS like /usr or the search string to anything in the > subject of the email (except dates of course). > > Finally, I'm still willing to help, but this isn't std RKH behaviour > as far as I know, so please look around your system yourself > (especially if grep didn't bring any good clues) and share any > constructive comments, hints or clues you can come up with. > > > Cheers, unSpawn > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting > language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding > territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > Rkhunter-users mailing list > Rkh...@li... > https://lists.sourceforge.net/lists/listinfo/rkhunter-users > > |