/usr/bin/whatis replaced by a script (correct?)

[Peo Nilsson]

On Tue, 2007-11-06 at 17:54 +0100, Peo Nilsson wrote:
> On Mon, 2007-11-05 at 22:31 -0500, Lowell Gilbert wrote:
> > Peo Nilsson <per-olof.nilsson at comhem.se> writes:
> > 
> > > When running rkhunter 1.3.0 I get those warnings:
> > >
> > > ...<snip>
> > > /usr/bin/whatis' has been replaced by a script: /usr/bin/whatis:
> > >  Bourne shell script text executable
> 
> > They aren't replaced.  They are all *supposed* to be scripts.
> 
> Thanks for the info.
> 
> After knowing this, I edited rkhunter.conf like this:
> RTKT_FILE_WHITELIST="/usr/bin/whatis /usr/sbin/adduser /usr/local/bin/GET /usr/local/sbin/pkgdb"
> 
> When running 'rkhunter -c' I still get the same warnings as before...
> What am I missing?

Solved, but many thanks anyway.
I should have set SCRIPTWHITELIST insteed of
RTKT_FILE_WHITELIST, wich I did first.


-- 
/Peo

----------------------------------------------
-   PGP signed/encrypted emails is prefered  - 
----------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20071114/5f7f1bf3/attachment.pgp