rkhunter-users

Fw: [Rkhunter-users] Re:Email problem after upgade

[Kent O. <fo...@ds...>]

I changed the email in the rkhunter.conf and it did not change anything. I
 then changed the email address in the /etc/cron.daily/01-rkhunter file and
 it still dosnt work.

>
> ----- Original Message ----- 
> From: "unspawn" <un...@ro...>
> To: <rkh...@li...>
> Sent: Thursday, March 23, 2006 2:18 PM
> Subject: Re: [Rkhunter-users] Re:Email problem after upgade
>
>
>> On Thu, 23 Mar 2006, Kent Olsen wrote:
>>>> grep -i ^mail.*= /path/to/rkhunter.conf /etc/cron.daily/01-rkhunter 
>>>> /etc/cron.d/run_rkhunter
>>>
>>> When I run the command I get: grep: /etc/cron.d/run_rkhunter: No such 
>>> file or directory
>>
>> Just means you didn't use the contributed run_rkhunter script, no 
>> problem.
>> Where you able to locate the email address in the config and/or cronjob?
>>
>>
>> Cheers, unSpawn
>>
>>
>>
>> -------------------------------------------------------
>> This SF.Net email is sponsored by xPML, a groundbreaking scripting 
>> language
>> that extends applications into web and mobile media. Attend the live 
>> webcast
>> and join the prime developer group breaking into this new coding 
>> territory!
>> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>> _______________________________________________
>> Rkhunter-users mailing list
>> Rkh...@li...
>> https://lists.sourceforge.net/lists/listinfo/rkhunter-users
>>
>>
> 

Re: Fw: [Rkhunter-users] Re:Email problem after upgade

[Kent O. <fo...@ds...>]

I found the problem. It was in /etc/sysconfig/rkhunter I removed the 
"@localhost" from MAILTO=root@localhost

Thanks

unspawn wrote:

> On Sun, 26 Mar 2006, Kent Olsen wrote:
>
>> I changed the email in the rkhunter.conf and it did not change 
>> anything. I
>> then changed the email address in the /etc/cron.daily/01-rkhunter 
>> file and
>> it still dosnt work.
>
>
> OK. Then we've got to check some other things.
>
> How is RKH run on your system? Only from /etc/cron.daily/01-rkhunter 
> or are there any other scripts that access it?
>
> How did you upgrade RKH, from tarball or an RPM? If from RPM, did you 
> build it yourself or was it apt/yum/autoupdated from a repository? If 
> you built it yourself, did you customise it or did you "rpm -tb 
> tarball"? If the RPM was from a repo, what's the exact location of the 
> package?
>
> The last thing to check is if we can find any "mail=" strings:
> grep -i .*mail.*= -r /etc /var/spool 2>/dev/null|tee /tmp/tee.$$
> Either spot it OTF or wade through /tmp/tee.$$ for clues. Can be a 
> rather large list depending on your system (200 to 500 lines). If this 
> doesn't turn up anything useful you could expand greps scope to other 
> parts of your FS like /usr or the search string to anything in the 
> subject of the email (except dates of course).
>
> Finally, I'm still willing to help, but this isn't std RKH behaviour 
> as far as I know, so please look around your system yourself 
> (especially if grep didn't bring any good clues) and share any 
> constructive comments, hints or clues you can come up with.
>
>
> Cheers, unSpawn
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting 
> language
> that extends applications into web and mobile media. Attend the live 
> webcast
> and join the prime developer group breaking into this new coding 
> territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Rkhunter-users mailing list
> Rkh...@li...
> https://lists.sourceforge.net/lists/listinfo/rkhunter-users
>
>