On Tue, Jul 22, 2008 at 3:54 AM, Daniel Dickinson <[EMAIL PROTECTED]> wrote:
> It doesn't appear to be test specific as sudo rkhunter --list tests
> gives:
> Database directory is not writable: /var/lib/rkhunter/db
Did you manually changed that? I don't have this message from
rkhunter, nor the directory is read-only.
Thanks
----
piti:~# rkhunter --list tests
Available test names:
additional_rkts all apps attributes deleted_files filesystem
group_accounts group_changes hashes hidden_procs immutable known_rkts
local_host malware network none os_specific other_malware
packet_cap_apps passwd_changes ports possible_rkt_files
possible_rkts possible_rkt_strings
promisc properties rootkits running_procs scripts shared_libs
shared_libs_path startup_files startup_malware strings suspscan
system_commands
system_configs trojans
Grouped test names:
additional_rkts => possible_rkt_files possible_rkt_strings
group_accounts => group_changes passwd_changes
local_host => filesystem group_changes passwd_changes
startup_malware system_configs
malware => deleted_files hidden_procs other_malware
running_procs suspscan
network => packet_cap_apps ports promisc
possible_rkts => possible_rkt_files possible_rkt_strings
properties => attributes hashes immutable scripts
rootkits => deleted_files hidden_procs known_rkts
os_specific other_malware possible_rkt_files possible_rkt_strings
running_procs suspscan trojans
shared_libs => shared_libs_path
startup_files => startup_malware
system_commands => attributes hashes immutable scripts
shared_libs_path strings
piti:~#
piti:~#
piti:~#
piti:~# apt-cache policy rkhunter
rkhunter:
Installed: 1.3.2-4
Candidate: 1.3.2-4
Version table:
*** 1.3.2-4 0
500 http://ftp.ro.debian.org sid/main Packages
500 http://ftp.us.debian.org sid/main Packages
100 /var/lib/dpkg/status
1.3.2-3 0
990 http://ftp.ro.debian.org lenny/main Packages
990 http://ftp.de.debian.org lenny/main Packages
990 http://ftp.fr.debian.org lenny/main Packages
1.2.9-2 0
500 http://ftp.ro.debian.org etch/main Packages
piti:~#
piti:~#
piti:~# ls -ld /var/lib/rkhunter/db
drwxr-xr-x 3 root root 344 2008-07-31 12:10 /var/lib/rkhunter/db
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
